CVE-2025-62892: WordPress Sunshine Photo Cart plugin <= 3.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Sunshine Photo Cart: from n/a through <= 3.5.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62892?
CVE-2025-62892 is classified as a missing authorization vulnerability that allows unauthorized access to functionalities due to improper ACL constraints.
How do I fix CVE-2025-62892?
To fix CVE-2025-62892, update Sunshine Photo Cart to version 3.5.4 or later where the vulnerability has been addressed.
What versions of Sunshine Photo Cart are affected by CVE-2025-62892?
CVE-2025-62892 affects Sunshine Photo Cart versions from n/a through 3.5.3 inclusive.
Can CVE-2025-62892 affect WordPress installations?
Yes, CVE-2025-62892 affects the Sunshine Photo Cart plugin when used on WordPress versions up to and including 3.5.3.
What functionality is impacted by CVE-2025-62892?
The functionality impacted by CVE-2025-62892 includes access not properly constrained by access control lists, allowing unauthorized actions.