https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T13:55:08.933181+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-348617 EUVD-2026-348617 2026-10-08T13:55:08.984582+00:00 EUVD-2026-348617 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16561 fkie_cve-2026-16561 2026-10-08T13:55:08.984623+00:00

The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to retrieve the comments of images belonging to private, password-protected or otherwise access-restricted galleries.

 https://cve.radiocsirt.org/vuln/ghsa-757h-48w7-3vc3 GHSA-757h-48w7-3vc3 2026-10-08T13:55:08.984657+00:00

The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to retrieve the comments of images belonging to private, password-protected or otherwise access-restricted galleries.