Login Request a demo
PR
Vendor
PrestaShop
33 products with CVEs on record
134
CVEs
0
On KEV
0
New 30D
Products
PR
PrestaShop
PrestaShop
9.9
95 CVEs0 on KEV0 new
PC
Prestashop Checkout
Prestashop
9.1
3 CVEs0 on KEV0 new
BL
blockwishlist
PrestaShop
8.8
2 CVEs0 on KEV0 new
CR
Customer Reassurance Block
Prestashop
8.1
2 CVEs0 on KEV0 new
ET
EO Tags
Prestashop
9.8
2 CVEs0 on KEV0 new
MP
M4 Pdf
Prestashop
6.5
2 CVEs0 on KEV0 new
PR
Productcomments
Prestashop
8.2
2 CVEs0 on KEV0 new
AC
Abandoned Cart Reminder Pro
Prestashop
9.8
1 CVEs0 on KEV0 new
AL
Advanced Loyalty Program
Prestashop
5.3
1 CVEs0 on KEV0 new
AR
Advanced Reviews
Prestashop
8.8
1 CVEs0 on KEV0 new
AM
Amazon
Prestashop
5.3
1 CVEs0 on KEV0 new
CO
Contactform
Prestashop
9.3
1 CVEs0 on KEV0 new
CE
Correos Express
Prestashop
7.5
1 CVEs0 on KEV0 new
DP
Dashboard Products
Prestashop
6.5
1 CVEs0 on KEV0 new
DF
Dpd France
Prestashop
9.8
1 CVEs0 on KEV0 new
EB
Ebay
Prestashop
–
1 CVEs0 on KEV0 new
EM
Ebay Module
Prestashop
–
1 CVEs0 on KEV0 new
FS
Faceted Search Module
Prestashop
5.4
1 CVEs0 on KEV0 new
IB
Import/update Bulk Product
Prestashop
9.8
1 CVEs0 on KEV0 new
PA
Payplug
Prestashop
9.8
1 CVEs0 on KEV0 new
PC
PK Customlinks
Prestashop
9.8
1 CVEs0 on KEV0 new
PO
Possearchproducts
Prestashop
9.8
1 CVEs0 on KEV0 new
PO
Poststaticfooter
Prestashop
9.8
1 CVEs0 on KEV0 new
PL
Prestashop Link
Prestashop
5.4
1 CVEs0 on KEV0 new
PL
Prestashop Linklist
Prestashop
5.4
1 CVEs0 on KEV0 new
PS
Prestashop Socialfollow
Prestashop
5.4
1 CVEs0 on KEV0 new
PC
Product Comments
Prestashop
6.1
1 CVEs0 on KEV0 new
PE
PS Emailsubscription
Prestashop
5.4
1 CVEs0 on KEV0 new
PS
ps_facetedsearch
PrestaShop
10.0
1 CVEs0 on KEV0 new
PS
psgdpr
PrestaShop
4.3
1 CVEs0 on KEV0 new
SC
Scexportcustomers
Prestashop
7.5
1 CVEs0 on KEV0 new
TF
The firmware
PrestaShop
4.5
1 CVEs0 on KEV0 new
XF
Xen Forum
Prestashop
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-92810
BL
blockwishlist
PrestaShop
4.3
0%
Sep 16PrestaShop blockwishlist through 3.0.2 Information Disclosure
CVE-2026-92809
PS
psgdpr
PrestaShop
4.3
0%
Sep 16PrestaShop psgdpr through 1.4.3 GDPR Log Forgery
CVE-2026-84186
PR
PrestaShop
PrestaShop
6.9
1%
Sep 7Incorrect access control in PrestaShop
CVE-2026-54159
PS
ps_facetedsearch
PrestaShop
10.0
1%
Jul 17ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE
CVE-2026-14846
TF
The firmware
PrestaShop
4.5
0%
Jul 13Incorrect neutralisation in the PrestaShop firmware
CVE-2026-44212
PR
PrestaShop
PrestaShop
9.3
0%
May 14PrestaShop: Stored XSS executable in customer service view
CVE-2026-33674
PR
PrestaShop
PrestaShop
5.3
0%
Mar 26PrestaShop: Improper Use of Validation Framework
CVE-2026-33673
PR
PrestaShop
PrestaShop
5.4
0%
Mar 26PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables
CVE-2026-25597
PR
PrestaShop
PrestaShop
5.3
0%
Feb 6PrestaShop has a time based enumeration in FO login form
CVE-2025-61924
PC
Prestashop Checkout
Prestashop
3.8
0%
Oct 16PrestaShop Checkout Target PayPal merchant account hijacking from backoffice
CVE-2025-61923
PC
Prestashop Checkout
Prestashop
4.1
1%
Oct 16PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
CVE-2025-61922
PC
Prestashop Checkout
Prestashop
9.1
1%
Oct 16PrestaShop Checkout allows customer account takeover via email
CVE-2025-51586
PR
Prestashop
Prestashop
3.7
1%
Sep 8An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password…
CVE-2025-25692
PR
Prestashop
Prestashop
6.5
1%
Jul 30A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request
CVE-2025-25691
PR
Prestashop
Prestashop
6.5
1%
Jul 30A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request
CVE-2024-36626
PR
Prestashop
Prestashop
5.3
1%
Nov 29In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php
CVE-2024-41651
PR
Prestashop
Prestashop
8.1
1%
Aug 12An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade functionality
CVE-2024-36684
PC
PK Customlinks
Prestashop
9.8
0%
Jun 19In the module "Custom links" (pk_customlinks) <= 2.3 from Promokit.eu for PrestaShop, a guest can perform SQL injection
CVE-2024-34717
PR
Prestashop
Prestashop
5.3
1%
May 14PrestaShop is an open source e-commerce web application
CVE-2024-34716
PR
Prestashop
Prestashop
6.1
56%
May 14PrestaShop is an open source e-commerce web application
CVE-2024-28392
AC
Abandoned Cart Reminder Pro
Prestashop
9.8
1%
Mar 20SQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker to escalate privileges via the…
CVE-2024-25843
IB
Import/update Bulk Product
Prestashop
9.8
1%
Feb 27In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in…
CVE-2024-26129
PR
Prestashop
Prestashop
5.3
1%
Feb 19PrestaShop is an open-source e-commerce platform
CVE-2023-48926
AL
Advanced Loyalty Program
Prestashop
5.3
0%
Jan 16An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status
CVE-2024-21628
PR
Prestashop
Prestashop
6.1
0%
Jan 2PrestaShop is an open-source e-commerce platform
CVE-2024-21627
PR
Prestashop
Prestashop
6.1
1%
Jan 2PrestaShop is an open-source e-commerce platform
CVE-2023-47110
CR
Customer Reassurance Block
Prestashop
5.3
0%
Nov 9blockreassurance adds an information block aimed at offering helpful information to reassure customers that their store is trustworthy
CVE-2023-47109
CR
Customer Reassurance Block
Prestashop
8.1
1%
Nov 8PrestaShop blockreassurance adds an information block aimed at offering helpful information to reassure customers that the store is trustworthy
CVE-2023-43664
PR
Prestashop
Prestashop
4.3
0%
Sep 28PrestaShop is an Open Source e-commerce web application
CVE-2023-43663
PR
Prestashop
Prestashop
4.3
0%
Sep 28PrestaShop is an Open Source e-commerce web application
CVE-2022-45448
MP
M4 Pdf
Prestashop
6.1
0%
Sep 20M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document crafting vulnerability
CVE-2022-45447
MP
M4 Pdf
Prestashop
6.5
1%
Sep 20M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to a directory traversal vulnerability
CVE-2023-39530
PR
Prestashop
Prestashop
9.1
1%
Aug 7PrestaShop is an open source e-commerce web application
CVE-2023-39529
PR
Prestashop
Prestashop
9.1
1%
Aug 7PrestaShop is an open source e-commerce web application
CVE-2023-39528
PR
Prestashop
Prestashop
8.6
1%
Aug 7PrestaShop is an open source e-commerce web application
CVE-2023-39527
PR
Prestashop
Prestashop
6.1
1%
Aug 7PrestaShop is an open source e-commerce web application
CVE-2023-39526
PR
Prestashop
Prestashop
9.8
2%
Aug 7PrestaShop is an open source e-commerce web application
CVE-2023-39525
PR
Prestashop
Prestashop
9.1
1%
Aug 7PrestaShop is an open source e-commerce web application
CVE-2023-39524
PR
Prestashop
Prestashop
9.8
1%
Aug 7PrestaShop is an open source e-commerce web application
CVE-2023-33777
AM
Amazon
Prestashop
5.3
1%
Jul 25An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversal attack
CVE-2023-30153
PA
Payplug
Prestashop
9.8
1%
Jul 18An SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.7.0 and 3.7.1, allows remote attackers to execute…
CVE-2023-30192
PO
Possearchproducts
Prestashop
9.8
3%
May 12Prestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find()
CVE-2023-30194
PO
Poststaticfooter
Prestashop
9.8
32%
May 10Prestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter::getPosCurrentHook()
CVE-2023-30282
SC
Scexportcustomers
Prestashop
7.5
1%
May 4PrestaShop scexportcustomers <= 3.6.1 is vulnerable to Incorrect Access Control
CVE-2023-30839
PR
Prestashop
Prestashop
8.8
2%
Apr 25PrestaShop is an Open Source e-commerce web application
CVE-2023-30838
PR
Prestashop
Prestashop
9.9
1%
Apr 25PrestaShop is an Open Source e-commerce web application
CVE-2023-30545
PR
Prestashop
Prestashop
6.5
1%
Apr 25PrestaShop is an Open Source e-commerce web application
CVE-2023-27570
ET
EO Tags
Prestashop
9.8
1%
Mar 21The eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie
CVE-2023-27569
ET
EO Tags
Prestashop
9.8
1%
Mar 21The eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or Referer header
CVE-2023-25206
AR
Advanced Reviews
Prestashop
8.8
1%
Mar 14PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection
CVE-2023-25207
DF
Dpd France
Prestashop
9.8
1%
Mar 13PrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php
CVE-2023-25170
PR
Prestashop
Prestashop
8.8
0%
Mar 13PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site request forgery (CSRF)
CVE-2023-24763
XF
Xen Forum
Prestashop
8.8
1%
Mar 6In the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL injection in versions up to 2.13.0
CVE-2022-46158
PR
Prestashop
Prestashop
4.3
0%
Dec 8PrestaShop is an open-source e-commerce solution
CVE-2022-35933
PR
Productcomments
Prestashop
6.1
1%
Sep 2This package is a PrestaShop module that allows users to post reviews and rate products
CVE-2022-31181
PR
PrestaShop
PrestaShop
9.8
7%
Aug 1Remote code execution in prestashop
CVE-2020-21967
PR
Prestashop
Prestashop
4.8
1%
Jul 13File upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to run arbitrary code via the add new file page
CVE-2022-31101
BL
Blockwishlist
Prestashop
8.8
23%
Jun 27prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists
CVE-2022-21686
PR
Prestashop
Prestashop
9.8
2%
Jan 26PrestaShop is an Open Source e-commerce platform
CVE-2012-20001
PR
Prestashop
Prestashop
6.1
1%
Dec 21PrestaShop before 1.5.2 allows XSS via the "<object data='data:text/html" substring in the message field