Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	5.3	EPSS 0.2%	CVE-2026-109689Sunshine Photo Cart · Missing Authorization Medium5.3EPSS 0.2%2026-10-15CVE Database V5CVE-2026-109689 Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 3.7.4. EPSS 0.2%Vulnerability WP Sunshine	CVE Database V5	2026-10-15
High	7.2	EPSS 0.3%	CVE-2026-93617Sunshine Photo Cart · Deserialization of Untrusted Data High7.2EPSS 0.3%2026-10-05CVE Database V5CVE-2026-93617 CVE-2026-93617 is a deserialization of untrusted data vulnerability in WP Sunshine's Sunshine Photo Cart plugin. This vulnerability allows object injection, potentially leading to full compromise of confidentiality, integrity, and availability. It affects versions from the initial release up to 3.7.1. The vulnerability has a high severity with a CVSS score of 7.2. No patch or remediation details are provided in the available data. EPSS 0.3%Vulnerability WP Sunshine	CVE Database V5	2026-10-05
Medium	6.3	EPSS 0.3%	CVE-2026-42776Sunshine Photo Cart · Missing Authorization Medium6.3EPSS 0.3%2026-05-25CVE Database V5CVE-2026-42776 Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sunshine Photo Cart: from n/a through 3.6.7. EPSS 0.3%Vulnerability WP Sunshine #cwe-862	CVE Database V5	2026-05-25

Showing 1–3 of 3 results