Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:wordpress:sunshine_photo_cart_client_photo_gallery_photo_proofing_for_photographers:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

PHP Object Injection in Sunshine Photo Cart WordPress Plugin

The Sunshine Photo Cart plugin for WordPress is vulnerable to unauthenticated PHP object injection in versions up to 3.7.4, which can be leveraged for RCE if secondary plugins provide a viable POP chain.

Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers web-application wordpress injection
2t 1c