Vulnerabilities / Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers / WPSEC-2026-0794
Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.7.3 - Unauthenticated Missing Authorization to Image Comment Submission in Restricted Galleries
Medium 5.3
CWE-862Fixed in 3.7.4
- ID
- WPSEC-2026-0794
- Plugin
- Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers (sunshine-photo-cart)
- Affected
- from 3.0 before 3.7.4
- Remediation
- Update to 3.7.4 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Weakness
- CWE-862
- Usage
- Plugin Low · Affected versions None seen among sites WPSec scans, 2026-10-12
- Attack surface
- Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers on WPSec AttackSurface
- Fix released
- Published
Description
The Sunshine Photo Cart plugin for WordPress is vulnerable to unauthorized comment submission via the sunshine_modal_add_comment AJAX action in versions 3.0 to 3.7.3, due to a missing gallery access check. The handler verified only a nonce and that the image's gallery allows comments. This makes it possible for unauthenticated attackers to post comments on images in galleries they do not have access to, such as password-protected, private, expired or login-only galleries, when those galleries have comments enabled.
References
- https://wpsec.com/vuln/WPSEC-2026-0794/
- https://plugins.svn.wordpress.org/sunshine-photo-cart/tags/3.7.4/
- https://wordpress.org/plugins/sunshine-photo-cart/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS