CVE-2026-57703
MediumCVSS 6.3Summary
Sunshine Photo Cart plugin version 3.6.10.1 and earlier allows a subscriber to break access control. A subscriber can gain unauthorized privileges.
Risk Assessment
The organization is at risk of unauthorized access to photo galleries and customer data.
Recommendation
Update the Sunshine Photo Cart plugin to a version newer than 3.6.10.1.
Other vulnerabilities in Sunshine Photo Cart
See all- CVE-2026-42776Medium
The Sunshine Photo Cart plugin up to version 3.6.7 has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
- CVE-2026-39564Medium
The WordPress plugin Sunshine Photo Cart (sunshine-photo-cart) by sunshinephotocart has a vulnerability that inserts sensitive information into sent data, allowing retrieval of embedded sensitive data. This affects versions below 3.6.2.
Original NVD description (English source)
Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions.