Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how prestashop compares to other vendors in security performance

View Risk Score →

Software

prestashop
97
prestashop prestashop
28
prestashop checkout
3
prestashop prestashop checkout prestashop
3
prestashop product comments
3
prestashop customer reassurance block
2
prestashop eo tags
2
prestashop account manager
1
prestashop advanced reviews
1
prestashop amazon
1
prestashop apaczka plugin
1
prestashop block wishlist
1
prestashop common-services for prestashop
1
prestashop contactform
1
prestashop correos express
1
prestashop ebay
1
prestashop ebay module
1
prestashop faceted search module
1
prestashop fme modules quickproducttable
1
prestashop import\/update bulk product prestashop
1
prestashop linklist
1
prestashop payplug
1
prestashop pos search products
1
prestashop poststaticfooter
1
prestashop ps email subscription
1
prestashop ps_contactinfo
1
prestashop scexportcustomers
1
prestashop socialfollow
1
prestashop upsshipping (prestashop module)
1
prestashop xen forum
1

Prestashop PrestaShopIncorrect neutralisation in the PrestaShop firmware

Risk 44
Severity
4.5
First published (updated )
CVE-2026-14846

Prestashop upsshipping (PrestaShop module)Infoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2026-39079

composer/prestashop/prestashopPrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables

Risk 47
Severity
7.7
EPSS
0.04%
First published (updated )
CVE-2026-33673

composer/prestashop/prestashopPrestaShop: Improper Use of Validation Framework

Risk 19
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2026-33674

composer/prestashop/prestashopPrestaShop has a time based enumeration in FO login form

Risk 19
Severity
5.3
EPSS
0.05%
First published (updated )
CVE-2026-25597
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Prestashop Prestashop Checkout PrestashopPrestaShop Checkout Target PayPal merchant account hijacking from backoffice

Risk 26
Severity
3.8
First published (updated )
CVE-2025-61924

Prestashop Prestashop Checkout PrestashopPrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure

Risk 20
Severity
4.1
First published (updated )
CVE-2025-61923

Prestashop Prestashop Checkout PrestashopPrestaShop Checkout allows customer account takeover via email

Risk 66
Severity
9.1
First published (updated )
CVE-2025-61922

composer/prestashop/prestashopAn issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1…

Risk 29
Severity
4.2
First published (updated )
CVE-2025-51586

Prestashop PrestaShopCommand Injection

Risk 40
Severity
6.5
First published (updated )
CVE-2025-25692
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Prestashop PrestaShopCommand Injection

Risk 40
Severity
6.5
First published (updated )
CVE-2025-25691

EuroInformation MoneticoPaiementSQL Injection

Risk 34
Severity
5.4
First published (updated )
CVE-2023-45256

Prestashop PrestaShopCross-Site Scripting (XSS) vulnerability in Prestashop

Risk 29
Severity
4.8
First published (updated )
CVE-2025-1230

composer/prestashop/ps_contactinfops_contactinfo has potential XSS due to usage of the nofilter tag in template

Risk 40
Severity
6.2
EPSS
0.04%
First published (updated )
CVE-2025-24027

Prestashop PrestaShopNull Pointer Dereference

Risk 27
Severity
5.3
First published (updated )
CVE-2024-36626
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

CoinGate PluginCoinGate Plugin Payment callback.php postProcess logic error

Risk 26
Severity
5.3
First published (updated )
CVE-2018-25104

Prestashop PrestaShopSSRF, Code Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2024-41651

Paypal Official Module for PrestaShopPayPal Official Module for PrestaShop has Improperly Implemented Security Check for Standard

Risk 43
Severity
7.5
First published (updated )
CVE-2024-41670

Quadra Informatique AxeptaInfoleak

Risk 43
Severity
7.5
First published (updated )
CVE-2024-34991

Promokit.eu Theme settingsIn the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest …

Risk 43
Severity
7.5
First published (updated )
CVE-2024-36682
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

FME Modules Help Desk - Customer Support Management SystemSQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2024-34992

Smart Modules Products AlertSQL Injection

Risk 51
Severity
7.3
First published (updated )
CVE-2024-36683

RSI prestapdfSQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2024-34989

Buy Addons Bulk Export products to Google Merchant-Google ShoppingSQL Injection

Risk 45
Severity
6.3
First published (updated )
CVE-2024-34993

FME Modules Help Desk - Customer Support Management SystemMalicious File Upload

Risk 87
Severity
10
First published (updated )
CVE-2024-34990
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Prestashop Pk CustomlinksSQL Injection

Risk 86
Severity
9.8
First published (updated )
CVE-2024-36684

Weblir Login as customer PROIn the module "Login as customer PRO" (loginascustomerpro) <1.2.7 from Weblir for PrestaShop, a gues…

Risk 43
Severity
7.5
First published (updated )
CVE-2024-36677

composer/prestashop/prestashopAnonymous PrestaShop customer can download other customers' invoices

Risk 20
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2024-34717

composer/prestashop/prestashopPrestaShop vulnerable to XSS via customer contact form in FO, through file upload

Risk 59
Severity
9.7
EPSS
0.04%
First published (updated )
CVE-2024-34716

Prestashop Apaczka pluginImproper access control in Apaczka plugin for PrestaShop

Risk 43
Severity
7.5
First published (updated )
CVE-2024-2759
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203