Sunshine Photo Cart: Free Client Photo Galleries for Photographers: Privilege escalation or authentication bypass
Sunshine Photo Cart: Free Client Photo Galleries for Photographers is affected by privilege escalation or authentication bypass. Exploitation requires at least subscriber-level access. A successful request can grant permissions or access that the caller should not possess.
- Component
- Sunshine Photo Cart: Free Client Photo Galleries for Photographers
- Plugin slug
sunshine-photo-cart- Affected
- See vendor advisory
- Safe version
- See mitigation notes
- Published
- Jun 04, 2025
This CVE was published Jun 04, 2025 and is one of 23 known issues for this plugin.
Patch or disable the affected component.
Update Sunshine Photo Cart: Free Client Photo Galleries for Photographers to a release outside the affected range, or disable and remove it until a fixed version is available.
Technical description
The Sunshine Photo Cart: Free Client Photo Galleries for Photographers plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11. This is due to the plugin not properly validating a user-supplied key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's passwords through the password reset functionality, including administrators, and leverage that to reset the user's password and gain access to their account.
CVE / CNA vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H