Sunshine Photo Cart (Unknown) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-14. Vendor: Unknown.

CVEs of Sunshine Photo Cart

• CVE-2026-108069 - CVSS 5.3 (medium), 2026-10-14: The Sunshine Photo Cart WordPress plugin before 3.7.4 does not check whether a visitor is permitted to access a restricted gallery before accepting comment…
• CVE-2026-85037 - CVSS 5.3 (medium), 2026-09-09: The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is…
• CVE-2026-16561 - CVSS 7.5 (high), 2026-08-05: The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to…
• CVE-2022-4301 - CVSS 6.1 (medium), 2023-01-09: The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…