Privilege Escalation in Sunshine Photo Cart Plugin for WordPress

CVE-2025-5482

What is CVE-2025-5482?

The Sunshine Photo Cart plugin for WordPress suffers from a privilege escalation flaw due to inadequate validation of a user-supplied key. This vulnerability affects all versions up to and including 3.4.11, allowing authenticated attackers with Subscriber-level access or higher to exploit the platform. Through the compromised password reset functionality, they can reset the passwords of any users, including those with administrative privileges, thus gaining unauthorized access to their accounts.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References