WP Sunshine vulnerabilities

6 vulnerabilities

Known vulnerabilities in WP Sunshine products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.

Products

1 of 2
5.3CVE-2026-109689wp sunshinesunshine photo cart
EPSS score
0.23%
Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.4.
8.8CVE-2022-40692sunshinephotocartsunshine_photo_cart+2
EPSS score
0.26%
Cross-Site Request Forgery (CSRF) vulnerability in WP Sunshine Sunshine Photo Cart plugin <= 2.9.13 versions.
6.3CVE-2022-45826sunshinephotocartsunshine_photo_cart+2
EPSS score
0.43%
Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 2.9.13.
6.3CVE-2026-42776wordpresssunshine-photo-cart+1
EPSS score
0.26%
Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sunshine Photo Cart: from n/a through 3.6.7.
7.5CVE-2026-93617wordpresssunshine-photo-cart+1
EPSS score
0.30%
Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a through 3.7.1.
6.5CVE-2023-41796sunshinephotocartsunshine_photo_cart+2
EPSS score
0.42%
Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers: from n/a before 3.0.0.