SP
Product
Sunshine Photo Cart
by · last CVE Oct 14, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add Sunshine Photo Cart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-108069
5.3
0%
Oct 14
Sunshine Photo Cart < 3.7.4 - Unauthenticated Content Injection via sunshine_modal_add_comment()
Affected: before 3.7.4
CVE-2026-85037
5.3
0%
Sep 9
Sunshine Photo Cart < 3.7 - Unauthenticated Price Manipulation via IDOR
Affected: before 3.7
Showing 2