PT-2026-31155 · Unknown · Sunshine Photo Cart

Published 2026-04-08 · Updated 2026-04-12 · CVE-2026-39564

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sunshine Photo Cart versions prior to 3.6.2

Description Sunshine Photo Cart contains a flaw that allows retrieval of embedded sensitive data due to improper handling of data insertion into sent data.

Recommendations Update Sunshine Photo Cart to version 3.6.2 or later.

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2026-39564

Affected Products

Sunshine Photo Cart

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-39564 · Security Note
• https://twitter.com/CVEnew/status/2043368556457562126 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/sunshine-photo-cart/vulnerability/wordpress-sunshine-photo-cart-plugin-3-6-2-sensitive-data-exposure-vulnerability?_s_id=cve · Note