Advisories · Technology

WP Sunshine Sunshine Photo Cart.

Every CVE that names WP Sunshine Sunshine Photo Cart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111842 CVE record

CVSS 5.3 Medium

WordPress Sunshine Photo Cart plugin <= 3.7.5 - Broken Access Control vulnerability
- WP Sunshine Sunshine Photo Cart
- Broken access control
Not analysed yet 22 Oct 2026
CVE-2026-109689 CVE record

CVSS 5.3 Medium

WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability
- WP Sunshine Sunshine Photo Cart
- Broken access control
Not analysed yet 15 Oct 2026
CVE-2026-93617 CVE record

CVSS 7.2 High

WordPress Sunshine Photo Cart plugin <= 3.7.1 - PHP Object Injection vulnerability
- WP Sunshine Sunshine Photo Cart
- Insecure deserialization
Not analysed yet 5 Oct 2026
CVE-2026-42776 CVE record

CVSS 6.3 Medium

WordPress Sunshine Photo Cart plugin <= 3.6.7 - Broken Access Control vulnerability
- WP Sunshine Sunshine Photo Cart
- Broken access control
Not analysed yet 25 May 2026
CVE-2022-45826 CVE record

CVSS 5.4 Medium

WordPress Sunshine Photo Cart plugin <= 2.9.13 - Auth. Broken Access Control vulnerability
- WP Sunshine Sunshine Photo Cart
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2022-40692 CVE record

CVSS 5.4 Medium

WordPress Sunshine Photo Cart Plugin <= 2.9.13 is vulnerable to Cross Site Request Forgery (CSRF)
- WP Sunshine Sunshine Photo Cart
- Cross-site request forgery (CSRF)
Not analysed yet 2 Feb 2023