WP Sunshine vulnerabilities
7 published CVEs name WP Sunshine among the affected products.
- 7Published CVEs7 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111842
WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability
WP Sunshine · Sunshine Photo Cart
Medium5.3 - CVE-2026-109689
WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability
WP Sunshine · Sunshine Photo Cart
Medium5.3 - CVE-2026-93617
WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability
WP Sunshine · Sunshine Photo Cart
High7.2 - CVE-2026-42776
WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability
WP Sunshine · Sunshine Photo Cart
Medium6.3 - CVE-2022-45826
WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability
WP Sunshine · Sunshine Photo Cart
Medium5.4 - CVE-2023-41796
WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)
WP Sunshine · Sunshine Photo Cart: Free Client Galleries for Photographers
Medium5.3 - CVE-2022-40692
WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)
WP Sunshine · Sunshine Photo Cart
Medium5.4