CVE-2026-109689
CVE-2026-109689 · WordPress Sunshine Photo Cart plugin <= 3.7.4 - Broken Access Control vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.4.
CVSS 5.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
sunshine photo cart
- Versions
- ≥ 0, ≤ 3.7.4: Affected; ≥ 3.7.5: Not affected (custom)
Update to 3.7.5