CVE-2026-42776

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart versions prior to 3.6.8

Description A missing authorization issue in the WP Sunshine Sunshine Photo Cart plugin allows for the exploitation of incorrectly configured access control security levels. This is a broken access control flaw where the system fails to properly verify if a user has the necessary permissions to perform certain actions.

Recommendations Update to a version newer than 3.6.7.