PatchTheCVEsunshine photo cart vulnerabilities and fixes
Recent CVEs affecting sunshine photo cart, with upgrade or downgrade steps. 8 tracked.
Also searched as: sunshinephotocart.
sunshine photo cart has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 8. Most recent: 2025-04-01. Highest priority: CVE-2025-31084 (score 53/100).
- CVE-2025-31084 CRITICAL 9.8 UPGRADE Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart a
- CVE-2024-50463 MEDIUM 4.7 UPGRADE URL Redirection to Untrusted Site ('Open Redirect') vulnerability in sunshinephotocart Sunshine Photo Cart sun
- CVE-2024-49697 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploi
- CVE-2024-47314 HIGH 7.1 UPGRADE Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploi
- CVE-2024-44038 MEDIUM 5.3 UPGRADE Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploi
- CVE-2024-43971 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshine
- CVE-2024-43136 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue af
- CVE-2022-45826 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configure
FAQ
How do I fix sunshine photo cart vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sunshine photo cart being exploited right now?
None of the tracked sunshine photo cart CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sunshine photo cart CVE should I patch first?
CVE-2025-31084 currently ranks highest (53/100): Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart a.