WP Sunshine — Vulnerabilities & Security Advisories 3

WP Sunshine is a WordPress plugin designed for managing business listings and directories. Historically, it has been vulnerable to multiple security issues including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities. These flaws often stem from insufficient input validation and improper access controls. The plugin has accumulated three CVEs, with some versions allowing unauthenticated attackers to execute arbitrary code or manipulate database queries. While no major public incidents have been widely documented, the consistent pattern of vulnerabilities suggests potential risks for sites running outdated versions. Regular updates and careful implementation are recommended due to the plugin's history of security shortcomings.