| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-39564 | WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability | sunshinephotocart | Sunshine Photo Cart | - | - | 2026-04-08 08:30:19 | Deep Dive |
| CVE-2025-67973 | WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability | sunshinephotocart | Sunshine Photo Cart | Medium | 6.5 | 2026-02-20 15:46:29 | Deep Dive |
| CVE-2026-24994 | WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability | sunshinephotocart | Sunshine Photo Cart | - | - | 2026-02-03 14:08:37 | Deep Dive |
| CVE-2025-68535 | WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability | sunshinephotocart | Sunshine Photo Cart | Medium | 4.3 | 2025-12-24 12:31:27 | Deep Dive |
| CVE-2025-62892 | WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability | sunshinephotocart | Sunshine Photo Cart | Medium | 5.3 | 2025-10-27 01:33:47 | Deep Dive |
| CVE-2025-5482 | Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation | sunshinephotocart | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | High | 8.8 | 2025-06-04 07:21:45 | Deep Dive |
| CVE-2025-31084 | WordPress Sunshine Photo Cart plugin <= 3.4.10 - PHP Object Injection Vulnerability | sunshinephotocart | Sunshine Photo Cart | Critical | 9.8 | 2025-04-01 05:31:42 | Deep Dive |
| CVE-2022-45826 | WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability | WP Sunshine | Sunshine Photo Cart | Medium | 5.4 | 2024-12-13 14:22:04 | Deep Dive |
| CVE-2024-49697 | WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability | sunshinephotocart | Sunshine Photo Cart | Medium | 4.3 | 2024-11-19 16:30:39 | Deep Dive |
| CVE-2024-47314 | WordPress Sunshine Photo Cart plugin <= 3.2.8 - Broken Access Control vulnerability | sunshinephotocart | Sunshine Photo Cart | High | 7.1 | 2024-11-01 14:18:44 | Deep Dive |
| CVE-2024-44038 | WordPress Sunshine Photo Cart plugin <= 3.2.9 - Broken Access Control vulnerability | sunshinephotocart | Sunshine Photo Cart | Medium | 5.3 | 2024-11-01 14:18:42 | Deep Dive |
| CVE-2024-43136 | WordPress Sunshine Photo Cart plugin <= 3.2.1 - Broken Access Control vulnerability | sunshinephotocart | Sunshine Photo Cart | Medium | 4.3 | 2024-11-01 14:17:47 | Deep Dive |
| CVE-2024-50463 | WordPress Sunshine Photo Cart plugin <= 3.2.9 - Open Redirection vulnerability | sunshinephotocart | Sunshine Photo Cart | Medium | 4.7 | 2024-10-28 12:33:32 | Deep Dive |
| CVE-2024-43971 | WordPress Sunshine Photo Cart plugin <= 3.2.5 - Cross Site Scripting (XSS) vulnerability | sunshinephotocart | Sunshine Photo Cart | High | 7.1 | 2024-09-17 23:32:00 | Deep Dive |
| CVE-2024-30221 | WordPress Sunshine Photo Cart plugin <= 3.1.1 - PHP Object Injection vulnerability | sunshinephotocart | Sunshine Photo Cart | Medium | 5.4 | 2024-03-28 05:07:42 | Deep Dive |
| CVE-2024-30194 | WordPress Sunshine Photo Cart plugin <= 3.1.1 - Reflected Cross Site Scripting (XSS) vulnerability | sunshinephotocart | Sunshine Photo Cart | High | 7.1 | 2024-03-27 06:40:13 | Deep Dive |
| CVE-2024-1294 | Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice | sunshinephotocart | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | Medium | 5.3 | 2024-02-20 18:56:49 | Deep Dive |
| CVE-2023-41796 | WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR) | WP Sunshine | Sunshine Photo Cart: Free Client Galleries for Photographers | Medium | 5.3 | 2023-12-20 13:42:22 | Deep Dive |
| CVE-2021-4415 | Sunshine Photo Cart <= 2.8.28 - Cross-Site Request Forgery Bypass | sunshinephotocart | Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers | Medium | 4.3 | 2023-07-12 03:40:45 | Deep Dive |
| CVE-2022-40692 | WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF) | WP Sunshine | Sunshine Photo Cart | Medium | 5.4 | 2023-02-02 15:58:57 | Deep Dive |