SU
Vendor
sunshinephotocart
26
CVEs
0
On KEV
1
New 30D
Products
SP9.8
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers
sunshinephotocart
4 CVEs0 on KEV1 new
SP9.8
Sunshine Photo Cart
sunshinephotocart
22 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-104730 | SP Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers sunshinephotocart | 9.8 | Oct 16 | Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter |
| CVE-2026-57703 | SP Sunshine Photo Cart sunshinephotocart | 6.3 | Jul 23 | WordPress Sunshine Photo Cart plugin <= 3.6.10.1 - Broken Access Control vulnerability |
| CVE-2026-39564 | SP Sunshine Photo Cart sunshinephotocart | 5.3 | Apr 8 | WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability |
| CVE-2025-67973 | SP Sunshine Photo Cart sunshinephotocart | 6.5 | Feb 20 | WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability |
| CVE-2026-24994 | SP Sunshine Photo Cart sunshinephotocart | 5.3 | Feb 3 | WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability |
| CVE-2025-68535 | SP Sunshine Photo Cart sunshinephotocart | 4.3 | Dec 24 | WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability |
| CVE-2025-62892 | SP Sunshine Photo Cart sunshinephotocart | 5.3 | Oct 27 | WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability |
| CVE-2025-5482 | SP Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers sunshinephotocart | 8.8 | Jun 4 | Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation |
| CVE-2025-31084 | SP Sunshine Photo Cart sunshinephotocart | 9.8 | Apr 1 | WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability |
| CVE-2022-45826 | SP Sunshine Photo Cart Sunshinephotocart | 5.4 | Dec 13 | WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability |
| CVE-2024-49697 | SP Sunshine Photo Cart sunshinephotocart | 4.3 | Nov 19 | WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability |
| CVE-2024-47314 | SP Sunshine Photo Cart sunshinephotocart | 8.8 | Nov 1 | WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability |
| CVE-2024-44038 | SP Sunshine Photo Cart sunshinephotocart | 9.8 | Nov 1 | WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability |
| CVE-2024-43136 | SP Sunshine Photo Cart sunshinephotocart | 8.8 | Nov 1 | WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability |
| CVE-2024-50463 | SP Sunshine Photo Cart sunshinephotocart | 6.1 | Oct 28 | WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability |
| CVE-2024-43971 | SP Sunshine Photo Cart sunshinephotocart | 6.1 | Sep 17 | WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-30221 | SP Sunshine Photo Cart sunshinephotocart | 9.8 | Mar 28 | WordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability |
| CVE-2024-30194 | SP Sunshine Photo Cart sunshinephotocart | 6.1 | Mar 27 | WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-1294 | SP Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers sunshinephotocart | 5.3 | Feb 20 | Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice |
| CVE-2023-41796 | SP Sunshine Photo Cart Sunshinephotocart | 6.5 | Dec 20 | WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR) |
| CVE-2021-4415 | SP Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers sunshinephotocart | 4.3 | Jul 12 | Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass |
| CVE-2022-40692 | SP Sunshine Photo Cart Sunshinephotocart | 8.8 | Feb 2 | WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2022-4301 | SP Sunshine Photo Cart Sunshinephotocart | 6.1 | Jan 9 | Sunshine Photo Cart < 2.9.15 - Reflected XSS |