Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
30 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Alta (7.2) | 0.30% | — | Sunshinephotocart Sunshine Photo CartAI | 5/10/2026 | 6/10/2026 | Deserialization of Untrusted Data vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a through 3.7.1. | |
| Aplazada | Media (5.3) | 0.30% | — | Sunshinephotocart Sunshine Photo CartAI | 9/9/2026 | 9/9/2026 | The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price defined elsewhere on the site and complete an order at that price, resulting in… | |
| Aplazada | Alta (7.5) | 0.41% | — | Sunshinephotocart Sunshine Photo CartAI | 5/8/2026 | 26/8/2026 | The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to retrieve the comments of images belonging to private, password-protected or otherwise access-restricted galleries. | |
| Aplazada | Media (6.3) | 0.26% | — | Sunshine Systems Photo CartAI | 23/7/2026 | 23/7/2026 | Subscriber Broken Access Control in Sunshine Photo Cart <= 3.6.10.1 versions. | |
| Aplazada | Media (6.3) | 0.26% | — | Sunshinephotocart Sunshine Photo CartAI | 25/5/2026 | 24/7/2026 | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Sunshine Photo Cart: from n/a through 3.6.7. | |
| Aplazada | Media (5.3) | 0.33% | — | Sunshinephotocart Sunshine Photo CartAI | 8/4/2026 | 24/7/2026 | Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a through < 3.6.2. | |
| Aplazada | Media (6.5) | 0.24% | — | Sunshinephotocart Sunshine Photo CartAI | 20/2/2026 | 17/6/2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.6.2. | |
| Aplazada | Media (5.3) | 0.22% | — | Sunshinephotocart Sunshine Photo CartAI | 3/2/2026 | 17/6/2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.2. | |
| Aplazada | Media (4.3) | 0.19% | — | Sunshinephotocart Sunshine Photo CartAI | 24/12/2025 | 17/6/2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.7.1. | |
| Aplazada | Media (5.3) | 0.27% | — | Sunshinephotocart Sunshine Photo CartAI | 27/10/2025 | 17/6/2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.3. | |
| Analizada | Alta (8.8) | 0.56% | — | Sunshinephotocart Sunshine Photo Cart | 4/6/2025 | 17/6/2026 | The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11. This is due to the plugin not properly validating a user-supplied key. This makes it possible for authenticated attackers,… | |
| Modificada | Crítica (9.8) | 0.72% | — | Sunshinephotocart Sunshine Photo Cart | 1/4/2025 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Object Injection.This issue affects Sunshine Photo Cart: from n/a through <= 3.4.10. | |
| Analizada | Media (5.4) | 0.43% | — | Sunshinephotocart Sunshine Photo Cart | 13/12/2024 | 17/6/2026 | Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through 2.9.13. | |
| Modificada | Media (4.3) | 0.41% | — | Sunshinephotocart Sunshine Photo Cart | 19/11/2024 | 17/6/2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9. | |
| Modificada | Alta (8.8) | 0.39% | — | Sunshinephotocart Sunshine Photo Cart | 1/11/2024 | 17/6/2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.8. | |
| Modificada | Crítica (9.8) | 0.41% | — | Sunshinephotocart Sunshine Photo Cart | 1/11/2024 | 17/6/2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9. | |
| Modificada | Alta (8.8) | 0.44% | — | Sunshinephotocart Sunshine Photo Cart | 1/11/2024 | 17/6/2026 | Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.1. | |
| Modificada | Media (6.1) | 0.27% | — | Sunshinephotocart Sunshine Photo Cart | 28/10/2024 | 17/6/2026 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.9. | |
| Modificada | Media (6.1) | 0.62% | 💥 Exploit | Sunshinephotocart Sunshine Photo Cart | 18/9/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.2.5. | |
| Modificada | Crítica (9.8) | 0.46% | — | Sunshinephotocart Sunshine Photo Cart | 28/3/2024 | 17/6/2026 | Deserialization of Untrusted Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.1.1. | |
| Modificada | Media (6.1) | 0.72% | 💥 Exploit | Sunshinephotocart Sunshine Photo Cart | 27/3/2024 | 17/6/2026 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart.This issue affects Sunshine Photo Cart: from n/a through <= 3.1.1. | |
| Modificada | Media (5.3) | 0.68% | — | Sunshinephotocart Sunshine Photo Cart | 29/2/2024 | 17/6/2026 | The Sunshine Photo Cart: Free Client Galleries for Photographers plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.24 via the 'invoice'. This makes it possible for unauthenticated attackers to extract sensitive data including customer email and physical… | |
| Modificada | Media (6.5) | 0.42% | — | Sunshinephotocart Sunshine Photo Cart | 20/12/2023 | 17/6/2026 | Authorization Bypass Through User-Controlled Key vulnerability in WP Sunshine Sunshine Photo Cart: Free Client Galleries for Photographers.This issue affects Sunshine Photo Cart: Free Client Galleries for Photographers: from n/a before 3.0.0. | |
| Modificada | Media (4.3) | 0.38% | — | Sunshinephotocart Sunshine Photo Cart | 12/7/2023 | 17/6/2026 | The Sunshine Photo Cart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.8.28 This is due to missing or incorrect nonce validation on the sunshine_products_quicksave_post() function. This makes it possible for unauthenticated attackers to save custom post data via a… | |
| Modificada | Alta (8.8) | 0.26% | — | Sunshinephotocart Sunshine Photo Cart | 2/2/2023 | 17/6/2026 | Cross-Site Request Forgery (CSRF) vulnerability in WP Sunshine Sunshine Photo Cart plugin <= 2.9.13 versions. |