| CVE-2026-108069 |
The Sunshine Photo Cart WordPress plugin before 3.7.4 does not check whether a visitor is permitted to access a…
|
5.3
Medium
|
Oct 14, 2026 |
| CVE-2026-85037 |
The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs…
|
5.3
Medium
|
Sep 9, 2026 |
| CVE-2026-16561 |
The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX…
|
7.5
High
|
Aug 5, 2026 |
| CVE-2022-4301 |
The Sunshine Photo Cart WordPress plugin before 2.9.15 does not sanitise and escape a parameter before outputting it…
|
6.1
Medium
|
Jan 9, 2023 |