The Sunshine Photo Cart: Free Client Galleries for Photographers plugin WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.4.11. This due the not properly validating a user-supplied key. makes it possible authenticated attackers, with Subscriber-level access above, change arbitrary user's passwords through password reset functionality, including administrators, leverage that gain their account.