UNKNOWN NVD

CVE-2026-16561

The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to ret

The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform access control checks in one of its AJAX actions, allowing unauthenticated users to retrieve the comments of images belonging to private, password-protected or otherwise access-restricted galleries.

References

https://wpscan.com/vulnerability/25bbf054-3b3f-4d88-899e-03d48055cbcd/

Published: 2026-08-05 · Source: NVD · Feed updated: 2026-08-05

This unknown severity vulnerability was published on 2026-08-05 via NVD.

vulnfeed aggregates 9225 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.