SP
Product
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
by sunshinephotocart · last CVE Oct 16, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 1Medium 2Low 0
Watch

Add Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-104730
9.8
1%
Oct 16
Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter
Affected: through 3.7.4
CVE-2025-5482
8.8
1%
Jun 4
Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation
Affected: through 3.4.11
CVE-2024-1294
5.3
1%
Feb 20
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
Affected: through 3.0.24
CVE-2021-4415
4.3
0%
Jul 12
Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass
Affected: through 2.8.28
Showing 4