WP Sunshine vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20241
3. 20264

Newest CVEs

• CVE-2026-111842

  WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability

  WP Sunshine · Sunshine Photo Cart

  Medium5.3
• CVE-2026-109689

  WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability

  WP Sunshine · Sunshine Photo Cart

  Medium5.3
• CVE-2026-93617

  WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability

  WP Sunshine · Sunshine Photo Cart

  High7.2
• CVE-2026-42776

  WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability

  WP Sunshine · Sunshine Photo Cart

  Medium6.3
• CVE-2022-45826

  WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability

  WP Sunshine · Sunshine Photo Cart

  Medium5.4
• CVE-2023-41796

  WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)

  WP Sunshine · Sunshine Photo Cart: Free Client Galleries for Photographers

  Medium5.3
• CVE-2022-40692

  WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)

  WP Sunshine · Sunshine Photo Cart

  Medium5.4