Sunshine Photo Cart vulnerabilities
We track 1 vulnerability in Sunshine Photo Cart products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Sunshine Photo Cart vulnerabilities
- 7.5 High severity
Sunshine Photo Cart: Missing Authorization
The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to retrieve the comments of images belonging to private, password-protected or otherwise access-restricted