Where
-Infinity
0

Trending

Last week
Last month
Last year

Prestashop PrestaShopCross-Site Scripting (XSS) vulnerability in Prestashop

Risk 29
Severity
4.8
First published (updated )
CVE-2025-1230

Prestashop PrestaShopNull Pointer Dereference

Risk 27
Severity
5.3
First published (updated )
CVE-2024-36626

Prestashop PrestaShopSSRF, Code Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2024-41651

Paypal Official Module for PrestaShopPayPal Official Module for PrestaShop has Improperly Implemented Security Check for Standard

Risk 43
Severity
7.5
First published (updated )
CVE-2024-41670

Quadra Informatique AxeptaInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2024-34991
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Promokit.eu Theme settingsIn the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest …

Risk 43
Severity
7.5
First published (updated )
CVE-2024-36682

FME Modules Help Desk - Customer Support Management SystemSQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2024-34992

Smart Modules Products AlertSQL Injection

Risk 51
Severity
7.3
First published (updated )
CVE-2024-36683

RSI prestapdfSQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2024-34989

Buy Addons Bulk Export products to Google Merchant-Google ShoppingSQL Injection

Risk 45
Severity
6.3
First published (updated )
CVE-2024-34993
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FME Modules Help Desk - Customer Support Management SystemMalicious File Upload

Risk 87
Severity
10
First published (updated )
CVE-2024-34990

Prestashop Pk CustomlinksSQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2024-36684

Weblir Login as customer PROIn the module "Login as customer PRO" (loginascustomerpro) <1.2.7 from Weblir for PrestaShop, a gues…

Risk 43
Severity
7.5
First published (updated )
CVE-2024-36677

composer/prestashop/prestashopAnonymous PrestaShop customer can download other customers' invoices

Risk 20
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2024-34717

composer/prestashop/prestashopPrestaShop vulnerable to XSS via customer contact form in FO, through file upload

Risk 59
Severity
9.7
EPSS
0.04%
First published (updated )
CVE-2024-34716
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

SunnyToo stproductcommentsSQL Injection

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-28388

Advanced Plugins ultimateimagetoolAn issue in Advanced Plugins ultimateimagetool module for PrestaShop before v.2.2.01, allows a remot…

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-28390

Team Ever Ever Ultimate SEOSQL Injection

Risk 31
Severity
5.9
EPSS
0.04%
First published (updated )
CVE-2024-25848

Prestashop So FlexibiliteAn issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop be…

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2024-25844

Tunis Soft Product DesignerPath Traversal

Risk 31
Severity
7.5
EPSS
0.04%
First published (updated )
CVE-2024-24307
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

MyPrestaModules Product Catalog \(csv\, Excel\) ImportSQL Injection

Risk 61
Severity
9.8
EPSS
0.04%
First published (updated )
CVE-2024-25847

Tunis Soft Product DesignerSSRF, CSRF

Risk 43
Severity
8.1
EPSS
0.04%
First published (updated )
CVE-2024-26469

Prestashop Advanced Loyalty ProgramAn issue in 202 ecommerce Advanced Loyalty Program: Loyalty Points before v2.3.4 for PrestaShop allo…

Risk 27
Severity
5.3
First published (updated )
CVE-2023-48926

PrestaShow Google Integrator PrestashopSQL Injection in PrestaShop Google Integrator

Risk 61
Severity
9.8
EPSS
0.07%
First published (updated )
CVE-2023-6921

composer/prestashop/prestashopImproper Privilege Management in Prestashop

Risk 46
Severity
6.3
First published (updated )
CVE-2023-43663
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

composer/prestashop/prestashopEmployee without any access rights can list all installed modules in Prestashop

Risk 23
Severity
4.3
First published (updated )
CVE-2023-43664

Prestashop M4 Pdf PrestashopCross-site Scripting in M4 PDF plugin for Prestashop sites

Risk 38
Severity
6.1
First published (updated )
CVE-2022-45448

Prestashop M4 Pdf PrestashopPath Traversal in M4 PDF plugin for Prestashop sites

Risk 38
Severity
6.5
First published (updated )
CVE-2022-45447

composer/prestashop/prestashopPrestaShop vulnerable to file deletion via CustomerMessage

Risk 67
Severity
9.1
First published (updated )
CVE-2023-39530

composer/prestashop/prestashopPrestaShop vulnerable to file deletion via attachment API

Risk 67
Severity
9.1
First published (updated )
CVE-2023-39529
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203