Skip to content
PluginCanary

Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers

by sunshinephotocart · 1,000+ active installs · Checked 3 Nov 2026
Healthy6 Warnings

Healthy: vulnerability published 22 Oct 2026, fixed in 3.8.

81/ 100 Canary Score
Sub-scores for Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers
Ownership100
Maintenance100
Security60
Support70
Reputation70

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 22 Oct 2026, fixed in 3.8. Update to version 3.8 or later.22 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 3.7.5. Update to version 3.7.5 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 15 Oct 2026, fixed in 3.7.5. Update to version 3.7.5 or later.15 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 14 Oct 2026, fixed in 3.7.4. Update to version 3.7.4 or later.14 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 3 Oct 2026, fixed in 3.7.2. Update to version 3.7.2 or later.3 Oct 2026Evidence
  • WarningSEC-1Vulnerability published 7 Sep 2026, fixed in 3.7. Update to version 3.7 or later.7 Sep 2026Evidence
  • InfoSEC-316 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
sunshinephotocart6 Aug 2015 to 11 Feb 2022, 204 commits
wpsunshine11 Feb 2022 to 21 Oct 2026, 155 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
13 days ago
Releases, 24 months
53
Tested up to
7.1 current
Requires PHP
7.4 supported 8.2+
Releases per quarter for Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers
Q1 202410
Q2 20248
Q3 202411
Q4 202410
Q1 20256
Q2 20251
Q3 20251
Q4 202514
Q1 20267
Q2 20267
Q3 20264
Q4 20264

Last release 21 Oct 2026. Tested with WordPress 7.1 (current).

Support

100% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
22 Oct 2026Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.7.5 - Missing Authorization5.3<= 3.7.53.80
15 Oct 2026Sunshine Photo Cart <= 3.7.4 - Unauthenticated PHP Object Injection via 'key' Parameter9.8<= 3.7.43.7.50
15 Oct 2026Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.7.4 - Missing Authorization5.3<= 3.7.43.7.50
14 Oct 2026Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers < 3.7.4 - Missing Authorization5.3< 3.7.43.7.40
3 Oct 2026Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.7.1 - Authenticated (Custom Role+) PHP Object Injection7.5<= 3.7.13.7.20
7 Sep 2026Sunshine Photo Cart <= 3.6 - Unauthenticated Insecure Direct Object Reference5.3<= 3.63.70
27 Jul 2026Sunshine Photo Cart <= 3.6.11 - Missing Authorization5.3<= 3.6.113.6.120
20 Jul 2026Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.6.10.1 - Missing Authorization4.3<= 3.6.10.13.6.110
26 May 2026Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers <= 3.6.7 - Missing Authorization4.3<= 3.6.73.6.80
26 Mar 2026Sunshine Photo Cart < 3.6.2 - Unauthenticated Information Exposure5.3< 3.6.23.6.20
27 Jan 2026Sunshine Photo Cart <= 3.5.6.2 - Missing Authorization5.3<= 3.5.6.23.5.7.10
23 Jan 2026Sunshine Photo Cart <= 3.5.7.2 - Missing Authorization5.3<= 3.5.7.23.5.7.30
30 Dec 2025Sunshine Photo Cart <= 3.5.7.1 - Missing Authorization4.3<= 3.5.7.13.5.7.20
29 Aug 2025Sunshine Photo Cart <= 3.5.3 - Missing Authorization5.3<= 3.5.33.5.461
3 Jun 2025Sunshine Photo Cart <= 3.4.11 - Authenticated (Subscriber+) Privilege Escalation8.8<= 3.4.113.4.120
28 Mar 2025Sunshine Photo Cart <= 3.4.10 - Unauthenticated PHP Object Injection9.8<= 3.4.103.4.110
24 Oct 2024Sunshine Photo Cart <= 3.2.9 - Open Redirect6.1<= 3.2.93.2.110
21 Oct 2024Sunshine Photo Cart <= 3.2.9 - Missing Authorization4.3<= 3.2.93.2.100
25 Sep 2024Sunshine Photo Cart <= 3.2.8 - Missing Authorization4.3<= 3.2.83.2.90
23 Sep 2024Sunshine Photo Cart <= 3.2.9 - Missing Authorization5.3<= 3.2.93.2.100
28 Aug 2024Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting6.1<= 3.2.53.2.60
7 Aug 2024Sunshine Photo Cart <= 3.2.1 - Missing Authorization4.3<= 3.2.13.2.20
26 Mar 2024Sunshine Photo Cart: Free Client Photo Galleries for Photographers <= 3.1.1 - Unauthenticated PHP Object Injection9.8<= 3.1.13.1.20
25 Mar 2024Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting6.1<= 3.1.13.1.20
12 Feb 2024Sunshine Photo Cart: Free Client Galleries for Photographers <= 3.0.24 - Unauthenticated Sensitive Information Exposure via Invoice5.3<= 3.0.243.10

Source: Wordfence Intelligence.

Reputation

Lifetime rating 4.7 from 138 ratings. Quarterly trends appear as new reviews arrive.

Rating distribution
5 star122
4 star6
3 star3
2 star2
1 star5

Momentum

1,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers
4 May 2026765
11 May 2026247
18 May 2026882
25 May 20261,569
1 Jun 2026314
8 Jun 2026207
15 Jun 2026156
22 Jun 2026132
29 Jun 2026872
6 Jul 2026310
13 Jul 2026172
20 Jul 2026940
27 Jul 2026264
3 Aug 2026272
10 Aug 2026212
17 Aug 2026265
24 Aug 2026920
31 Aug 2026361
7 Sep 20261,070
14 Sep 2026419
21 Sep 20261,038
28 Sep 20261,109
5 Oct 20261,212
12 Oct 20261,432
19 Oct 20261,404
26 Oct 2026751
2 Nov 202649

Weekly downloads over the last 4 weeks are 42% above the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

Commerce7 for WordPressScore 91 · 1,000+External Store for ShopifyScore 87 · 2,000+Product Catalog SimpleScore 86 · 1,000+WooCommerceScore 85 · 7,000,000+Easy Digital Downloads - eCommerce Payments and Subscriptions made easyScore 85 · 40,000+

Facts

Version3.8
Authorsunshinephotocart
Added6 Aug 2015
Last updated21 Oct 2026
Active installs1,000+
Requires WordPress5.5
Tested up to7.1.4
Requires PHP7.4
CategoryE-commerce & Shopping > Product Management & Catalogs
Tagssell photos, photo proofing, client proofing, client galleries, client photo gallery

Questions

Is Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers still maintained?

Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers was last updated on 21 Oct 2026. Its Canary status is Healthy.

Is Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers safe?

Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers has no open unpatched vulnerabilities on record. 16 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers?

The wordpress.org author is sunshinephotocart. Recent committers: wpsunshine, sunshinephotocart, plugin-master. We have recorded no ownership change.

What can I use instead of Sunshine Photo Cart - Client Photo Gallery & Photo Proofing for Photographers?

Plugins in the same category with a higher Canary Score: Commerce7 for WordPress, External Store for Shopify, Product Catalog Simple, WooCommerce, Easy Digital Downloads - eCommerce Payments and Subscriptions made easy.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue