sales@hackhalt.com
Free Download

Live Vulnerability Intelligence

Threat Database

Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.

Total26
Critical1
High6
Medium19
Reset
Showing 1-20 of 26 records
Threat Entry Updated 2026-09-09

Sunshine Photo Cart - Improper Input Validation (CVE-2026-85037)

The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price defined elsewhere on the site and complete an order at that price, resulting in financial loss for the site owner.

PLUGIN Sunshine Photo Cart

CVE-2026-85037

MEDIUM CVSS 5.3 2026-09-09
Open Full Technical Breakdown
Threat Entry Updated 2026-08-26

Sunshine Photo Cart - Broken Access Control (CVE-2026-16561)

The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to retrieve the comments of images belonging to private, password-protected or otherwise access-restricted galleries.

PLUGIN Sunshine Photo Cart

CVE-2026-16561

HIGH CVSS 7.5 2026-08-05
Open Full Technical Breakdown
Threat Entry Updated 2026-06-17

Sunshine Photo Cart - Privilege Escalation (CVE-2025-5482)

The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11. This is due to the plugin not properly validating a user-supplied key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's passwords through the password reset functionality, including administrators, and leverage that to reset the user's password and gain access to their account.

PLUGIN Sunshine Photo Cart

CVE-2025-5482

HIGH CVSS 8.8 2025-06-04
Open Full Technical Breakdown

WordPress security that blocks attacks before they land.

sales@hackhalt.com

Product

Resources

Company

© Hack Halt Inc. All rights reserved.