Approved changes feed: RSS · Atom

cpe:2.3:a:sunshinephotocart:sunshine_photo_cart:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSunshinephotocart (20489348-e185-508f-b14a-bd73a0e6dc27)
ProductSunshine Photo Cart (345533f2-bb20-5336-8f2c-04ce34c93105)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wp-plugins/sunshine-photo-cart purl2cpe 2026-06-01 10:12:47.493402

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39564 vulnerable 2026-06-08 08:01:16.645556 WordPress Sunshine Photo Cart plugin < 3.6.2 - Sensitive Data Exposure vulnerability
MEDIUM (5.3)
Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a through < 3.6.2.
Published: 2026-04-08T08:30:18.874Z
Updated: 2026-04-29T09:52:02.141Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24994 vulnerable 2026-06-08 07:53:18.805774 WordPress Sunshine Photo Cart plugin <= 3.5.7.2 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.2.
Published: 2026-02-03T14:08:37.221Z
Updated: 2026-04-28T16:14:52.997Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-68535 vulnerable 2026-06-08 07:41:21.354004 WordPress Sunshine Photo Cart plugin <= 3.5.7.1 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.1.
Published: 2025-12-24T12:31:27.019Z
Updated: 2026-04-28T16:14:29.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-67973 vulnerable 2026-06-08 07:41:20.669522 WordPress Sunshine Photo Cart plugin <= 3.5.6.2 - Broken Access Control vulnerability
MEDIUM (6.5)
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.6.2.
Published: 2026-02-20T15:46:29.373Z
Updated: 2026-04-28T16:14:24.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62892 vulnerable 2026-06-08 07:39:16.983968 WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.3.
Published: 2025-10-27T01:33:47.085Z
Updated: 2026-04-28T16:14:04.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31084 vulnerable 2026-06-08 07:17:02.338554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50463 vulnerable 2026-06-08 06:52:10.163288 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49697 vulnerable 2026-06-08 06:50:14.545004 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-47314 vulnerable 2026-06-08 06:48:11.752568 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-44038 vulnerable 2026-06-08 06:45:53.473390 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43971 vulnerable 2026-06-08 06:45:53.328955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-43136 vulnerable 2026-06-08 06:45:49.660842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30221 vulnerable 2026-06-08 06:35:29.273808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-30194 vulnerable 2026-06-08 06:35:29.226999 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.