SP
Product
Sunshine Photo Cart
by WP Sunshine · last CVE Oct 22, 2026
6
CVEs
0
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch

Add Sunshine Photo Cart to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-40692
8.8
0%
Feb 2
WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: through 2.9.13
CVE-2026-93617
7.2
0%
Oct 5
WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability
Affected: through 3.7.1
Showing 2