CyberRota Analysis
AI-GeneratedThe Sunshine Photo Cart plugin for WordPress versions prior to 3.7 is vulnerable due to inadequate validation of client-supplied price identifiers, enabling unauthenticated users to exploit this flaw and purchase items at reduced prices. This can lead to significant financial losses for site owners as unauthorized transactions are processed at incorrect pricing. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Sunshine Photo Cart WordPress plugin before 3.7 does not validate that a client-supplied price identifier belongs to the item being purchased when it is added to the cart, allowing unauthenticated users to buy items at a lower price defined elsewhere on the site and complete an order at that price, resulting in financial loss for the site owner.