CVE-2026-39564

INFO Priority: 0.00 BB Relevance: 0/100

Published: 2026-04-08 Modified: 2026-10-23 First seen: 2026-10-29 Status: pending_score

Description

Insertion of Sensitive Information Into Sent Data vulnerability in sunshinephotocart Sunshine Photo Cart sunshine-photo-cart allows Retrieve Embedded Sensitive Data.This issue affects Sunshine Photo Cart: from n/a through < 3.6.2.

Weakness Classification (1)

CWE-201

References & Advisories (1)

https://patchstack.com/database/Wordpress/Plugin/sunshine-photo-cart/vulnerability/wordpress-sunshine-photo-cart-plugin-3-6-2-sensitive-data-exposure-vulnerability?_s_id=cve

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.24%

Raw Score 0.002400

Percentile 15.2%

Date 2026-10-29

EPSS Trend

2026-10-29

0.00240

2026-10-28

0.00240

Intelligence Sources

nvd ref →

External Links

NVD (NIST) CVE Details FIRST EPSS API OSV.dev