Login Request a demo
PR
Vendor
Prestashop
45 products with CVEs on record
157
CVEs
0
On KEV
0
New 30D
Products
PR
Prestashop
Prestashop
9.9
101 CVEs0 on KEV0 new
MP
M4 Pdf
Prestashop
10.0
3 CVEs0 on KEV0 new
PC
Prestashop Checkout
Prestashop
9.1
3 CVEs0 on KEV0 new
BL
blockreassurance
PrestaShop
8.1
2 CVEs0 on KEV0 new
BL
blockwishlist
PrestaShop
8.8
2 CVEs0 on KEV0 new
CR
Customer Reassurance Block
Prestashop
8.1
2 CVEs0 on KEV0 new
ET
EO Tags
Prestashop
9.8
2 CVEs0 on KEV0 new
FM
Fme
Prestashop
7.5
2 CVEs0 on KEV0 new
HE
Helpdesk
Prestashop
10.0
2 CVEs0 on KEV0 new
MP
M4 PDF plugin
Prestashop
6.5
2 CVEs0 on KEV0 new
PR
Productcomments
Prestashop
8.2
2 CVEs0 on KEV0 new
AC
Abandoned Cart Reminder Pro
Prestashop
9.8
1 CVEs0 on KEV0 new
AL
Advanced Loyalty Program
Prestashop
5.3
1 CVEs0 on KEV0 new
AR
Advanced Reviews
Prestashop
8.8
1 CVEs0 on KEV0 new
AM
Amazon
Prestashop
5.3
1 CVEs0 on KEV0 new
AF
Ask For A Quote
Prestashop
9.8
1 CVEs0 on KEV0 new
CH
Channable
Prestashop
9.8
1 CVEs0 on KEV0 new
CO
Contactform
Prestashop
9.3
1 CVEs0 on KEV0 new
CE
Correos Express
Prestashop
7.5
1 CVEs0 on KEV0 new
DP
Dashboard Products
Prestashop
6.5
1 CVEs0 on KEV0 new
DF
Dpd France
Prestashop
9.8
1 CVEs0 on KEV0 new
EB
Ebay
Prestashop
–
1 CVEs0 on KEV0 new
EM
Ebay Module
Prestashop
–
1 CVEs0 on KEV0 new
FS
Faceted Search Module
Prestashop
5.4
1 CVEs0 on KEV0 new
IB
Import/update Bulk Product
Prestashop
9.8
1 CVEs0 on KEV0 new
LI
Livechatpro
Prestashop
10.0
1 CVEs0 on KEV0 new
LO
Loginascustomerpro
Prestashop
7.5
1 CVEs0 on KEV0 new
NP
Newsletter Popup Pro
Prestashop
9.8
1 CVEs0 on KEV0 new
PA
Payplug
Prestashop
9.8
1 CVEs0 on KEV0 new
PC
PK Customlinks
Prestashop
9.8
1 CVEs0 on KEV0 new
PO
Possearchproducts
Prestashop
9.8
1 CVEs0 on KEV0 new
PO
Poststaticfooter
Prestashop
9.8
1 CVEs0 on KEV0 new
PL
Prestashop Link
Prestashop
5.4
1 CVEs0 on KEV0 new
PL
Prestashop Linklist
Prestashop
5.4
1 CVEs0 on KEV0 new
PS
Prestashop Socialfollow
Prestashop
5.4
1 CVEs0 on KEV0 new
PC
Product Comments
Prestashop
6.1
1 CVEs0 on KEV0 new
PS
ps_contactinfo
PrestaShop
6.2
1 CVEs0 on KEV0 new
PE
PS Emailsubscription
Prestashop
5.4
1 CVEs0 on KEV0 new
PS
ps_facetedsearch
PrestaShop
10.0
1 CVEs0 on KEV0 new
PS
psgdpr
PrestaShop
4.3
1 CVEs0 on KEV0 new
QI
Quadra Informatique
Prestashop
7.5
1 CVEs0 on KEV0 new
SC
Scalapay
Prestashop
9.8
1 CVEs0 on KEV0 new
SC
Scexportcustomers
Prestashop
7.5
1 CVEs0 on KEV0 new
TF
The firmware
PrestaShop
4.5
1 CVEs0 on KEV0 new
XF
Xen Forum
Prestashop
8.8
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-92810
BL
blockwishlist
PrestaShop
4.3
0%
Sep 16PrestaShop blockwishlist through 3.0.2 Information Disclosure
CVE-2026-92809
PS
psgdpr
PrestaShop
4.3
0%
Sep 16PrestaShop psgdpr through 1.4.3 GDPR Log Forgery
CVE-2026-84186
PR
PrestaShop
PrestaShop
6.9
1%
Sep 7Incorrect access control in PrestaShop
CVE-2026-54159
PS
ps_facetedsearch
PrestaShop
10.0
1%
Jul 17ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE
CVE-2026-14846
TF
The firmware
PrestaShop
4.5
0%
Jul 13Incorrect neutralisation in the PrestaShop firmware
CVE-2026-44212
PR
PrestaShop
PrestaShop
9.3
0%
May 14PrestaShop: Stored XSS executable in customer service view
CVE-2026-33674
PR
PrestaShop
PrestaShop
5.3
0%
Mar 26PrestaShop: Improper Use of Validation Framework
CVE-2026-33673
PR
PrestaShop
PrestaShop
5.4
0%
Mar 26PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables
CVE-2026-25597
PR
PrestaShop
PrestaShop
5.3
0%
Feb 6PrestaShop has a time based enumeration in FO login form
CVE-2025-61924
PC
Prestashop Checkout
Prestashop
3.8
0%
Oct 16PrestaShop Checkout Target PayPal merchant account hijacking from backoffice
CVE-2025-61923
PC
Prestashop Checkout
Prestashop
4.1
1%
Oct 16PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
CVE-2025-61922
PC
Prestashop Checkout
Prestashop
9.1
1%
Oct 16PrestaShop Checkout allows customer account takeover via email
CVE-2025-51586
PR
Prestashop
Prestashop
3.7
1%
Sep 8An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password…
CVE-2025-25691
PR
Prestashop
Prestashop
6.5
1%
Jul 30A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request
CVE-2025-25692
PR
Prestashop
Prestashop
6.5
1%
Jul 30A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request
CVE-2025-1230
PR
Prestashop
Prestashop
4.8
0%
Feb 12Cross-Site Scripting (XSS) vulnerability in Prestashop
CVE-2025-24027
PS
ps_contactinfo
PrestaShop
6.2
0%
Jan 22ps_contactinfo has potential XSS due to usage of the nofilter tag in template
CVE-2024-36626
PR
Prestashop
Prestashop
5.3
1%
Nov 29In prestashop 8.1.4, a NULL pointer dereference was identified in the math_round function within Tools.php
CVE-2024-41651
PR
Prestashop
Prestashop
8.1
1%
Aug 12An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade functionality
CVE-2024-34991
QI
Quadra Informatique
Prestashop
7.5
0%
Jun 24In the module "Axepta" (axepta) before 1.3.4 from Quadra Informatique for PrestaShop, a guest can download partial credit card information (expiry date) / postal address / email /…
CVE-2023-50029
MP
M4 Pdf
Prestashop
10.0
1%
Jun 24PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers to run arbitrary code via the…
CVE-2024-34992
HE
Helpdesk
Prestashop
8.8
0%
Jun 24SQL Injection vulnerability in the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop allows attackers to…
CVE-2024-34988
AF
Ask For A Quote
Prestashop
9.8
0%
Jun 24SQL injection vulnerability in the module "Complete for Create a Quote in Frontend + Backend Pro" (askforaquotemodul) <= 1.0.51 from Buy Addons for PrestaShop allows attackers to…
CVE-2024-34989
PR
Prestashop
Prestashop
9.8
0%
Jun 21In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via…
CVE-2024-34994
CH
Channable
Prestashop
9.8
0%
Jun 19In the module "Channable" (channable) up to version 3.2.1 from Channable for PrestaShop, a guest can perform SQL injection via `ChannableFeedModuleFrontController::postProcess()`
CVE-2024-36677
LO
Loginascustomerpro
Prestashop
7.5
0%
Jun 19In the module "Login as customer PRO" (loginascustomerpro) <1.2.7 from Weblir for PrestaShop, a guest can access direct link to connect to each customer account of the Shop if the…
CVE-2024-36684
PC
PK Customlinks
Prestashop
9.8
0%
Jun 19In the module "Custom links" (pk_customlinks) <= 2.3 from Promokit.eu for PrestaShop, a guest can perform SQL injection
CVE-2024-36679
LI
Livechatpro
Prestashop
10.0
1%
Jun 19In the module "Module Live Chat Pro (All in One Messaging)" (livechatpro) <=8.4.0, a guest can perform PHP Code injection
CVE-2024-34990
HE
Helpdesk
Prestashop
10.0
1%
Jun 19In the module "Help Desk - Customer Support Management System" (helpdesk) up to version 2.4.0 from FME Modules for PrestaShop, a customer can upload .php files
CVE-2024-34717
PR
PrestaShop
PrestaShop
5.3
1%
May 14Anonymous PrestaShop customer can download other customers' invoices
CVE-2024-34716
PR
PrestaShop
PrestaShop
6.1
56%
May 14PrestaShop vulnerable to XSS via customer contact form in FO, through file upload
CVE-2024-33274
FM
Fme
Prestashop
7.5
1%
Apr 30Directory Traversal vulnerability in FME Modules customfields v.2.2.7 and before allows a remote attacker to obtain sensitive information via the Custom Checkout Fields, Add…
CVE-2024-33270
PR
Prestashop
Prestashop
7.5
1%
Apr 30An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive information via the uploadfiles.php component
CVE-2024-33272
PR
Prestashop
Prestashop
6.8
0%
Apr 29SQL injection vulnerability in KnowBand for PrestaShop autosuggest before 2.0.0 allows an attacker to run arbitrary SQL commands via the…
CVE-2024-33276
PR
Prestashop
Prestashop
9.8
1%
Apr 29SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands via the…
CVE-2024-33271
FM
Fme
Prestashop
7.5
0%
Apr 29An issue in FME Modules eventsmanager before 4.4.0 allows an attacker to obtain sensitive information from the ps_customer component
CVE-2024-28393
SC
Scalapay
Prestashop
9.8
1%
Mar 25SQL injection vulnerability in scalapay v.1.2.41 and before allows a remote attacker to escalate privileges via the ScalapayReturnModuleFrontController::postProcess() method
CVE-2024-28392
AC
Abandoned Cart Reminder Pro
Prestashop
9.8
1%
Mar 20SQL injection vulnerability in pscartabandonmentpro v.2.0.11 and before allows a remote attacker to escalate privileges via the…
CVE-2024-25845
PR
Prestashop
Prestashop
9.8
1%
Mar 8In the module "CD Custom Fields 4 Orders" (cdcustomfields4orders) <= 1.0.0 from Cleanpresta.com for PrestaShop, a guest can perform SQL injection in affected versions
CVE-2024-25843
IB
Import/update Bulk Product
Prestashop
9.8
1%
Feb 27In the module "Import/Update Bulk Product from any Csv/Excel File Pro" (ba_importer) up to version 1.1.28 from Buy Addons for PrestaShop, a guest can perform SQL injection in…
CVE-2024-26129
PR
PrestaShop
PrestaShop
5.3
1%
Feb 19Prestashop vulnerable to path disclosure in JavaScript variable
CVE-2023-48926
AL
Advanced Loyalty Program
Prestashop
5.3
0%
Jan 16An issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allows unauthenticated attackers to arbitrarily change an order status
CVE-2024-21628
PR
PrestaShop
PrestaShop
6.1
0%
Jan 2XSS can be stored in DB from "add a message form" in order detail page (FO)
CVE-2024-21627
PR
PrestaShop
PrestaShop
6.1
1%
Jan 2Some attribute not escaped in Validate::isCleanHTML method
CVE-2023-47308
NP
Newsletter Popup Pro
Prestashop
9.8
1%
Nov 15In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a guest can perform SQL injection in affected…
CVE-2023-47110
BL
blockreassurance
PrestaShop
5.3
0%
Nov 9Any value can be changed in the configuration table by an employee having access to block reassurance module
CVE-2023-47109
BL
blockreassurance
PrestaShop
8.1
1%
Nov 8PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block
CVE-2023-43664
PR
PrestaShop
PrestaShop
4.3
0%
Sep 28Employee without any access rights can list all installed modules in Prestashop
CVE-2023-43663
PR
PrestaShop
PrestaShop
4.3
0%
Sep 28Improper Privilege Management in Prestashop
CVE-2022-45448
MP
M4 PDF plugin
Prestashop
6.1
0%
Sep 20Cross-site Scripting in M4 PDF plugin for Prestashop sites
CVE-2022-45447
MP
M4 PDF plugin
Prestashop
6.5
1%
Sep 20Path Traversal in M4 PDF plugin for Prestashop sites
CVE-2023-39530
PR
PrestaShop
PrestaShop
9.1
1%
Aug 7PrestaShop vulnerable to file deletion via CustomerMessage
CVE-2023-39529
PR
PrestaShop
PrestaShop
9.1
1%
Aug 7PrestaShop vulnerable to file deletion via attachment API
CVE-2023-39528
PR
PrestaShop
PrestaShop
8.6
1%
Aug 7PrestaShop vulnerable to file reading through path traversal
CVE-2023-39527
PR
PrestaShop
PrestaShop
6.1
1%
Aug 7PrestaShop XSS vulnerability through Validate::isCleanHTML method
CVE-2023-39526
PR
PrestaShop
PrestaShop
9.8
2%
Aug 7PrestaShopSQL manager vulnerability (potential RCE)
CVE-2023-39525
PR
PrestaShop
PrestaShop
9.1
1%
Aug 7PrestaShop vulnerable to path traversal
CVE-2023-39524
PR
PrestaShop
PrestaShop
9.8
1%
Aug 7PrestaShop vulnerable to boolean SQL injection in search product in BO
CVE-2023-33777
AM
Amazon
Prestashop
5.3
1%
Jul 25An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversal attack
CVE-2023-30153
PA
Payplug
Prestashop
9.8
1%
Jul 18An SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0, 3.6.1, 3.6.2, 3.6.3, 3.7.0 and 3.7.1, allows remote attackers to execute…