The Sunshine Photo Cart plugin for WordPress, which is used by photographers to create free client galleries, has a security issue. This issue, present in all versions up to 3.0.24, allows hackers to access sensitive information such as customer email and physical addresses through the ‘invoice’ feature. This can be done without needing to log in.