Login Request a demo
SP
Product
Sunshine Photo Cart
by sunshinephotocart · last CVE Jul 23, 2026
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities22In the news0Timeline
Severity mix
Critical 3High 4Medium 15Low 0
Severity
All severities22Critical3High4Medium15Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sunshine Photo Cart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-67973
6.5
0%
Feb 20
WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability
Affected: through 3.5.6.2
CVE-2023-41796
6.5
0%
Dec 20
WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)
Affected: before 3.0
CVE-2026-57703
6.3
0%
Jul 23
WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability
Affected: through 3.6.10.1
CVE-2024-50463
6.1
0%
Oct 28
WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability
Affected: through 3.2.9
CVE-2024-43971
6.1
1%
Sep 17
WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability
Affected: through 3.2.5
CVE-2024-30194
6.1
1%
Mar 27
WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 3.1.1
CVE-2022-4301
6.1
1%
Jan 9
Sunshine Photo Cart < 2.9.15 - Reflected XSS
Affected: before 2.9.15
CVE-2022-45826
5.4
0%
Dec 13
WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability
Affected: before 2.9.14
CVE-2026-39564
5.3
0%
Apr 8
WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability
Affected: through 3.6.2
CVE-2026-24994
5.3
0%
Feb 3
WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability
Affected: through 3.5.7.2
CVE-2025-62892
5.3
0%
Oct 27
WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability
Affected: through 3.5.3
CVE-2024-1294
5.3
1%
Feb 20
Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice
Affected: before 3.1
CVE-2025-68535
4.3
0%
Dec 24
WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability
Affected: through 3.5.7.1
CVE-2024-49697
4.3
0%
Nov 19
WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability
Affected: through 3.2.9
CVE-2021-4415
4.3
0%
Jul 12
Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass
Affected: through 2.8.28
Showing 15