Critical
CVE-2026-54159
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 257
Reset filters
High
CVE-2026-39079
Sensitive data exposure via publicly accessible logs in upsshipping module from Agence Web 360 for PrestaShop
Critical
CVE-2026-44212
PrestaShop has a stored XSS executable in customer service view
Low
ghsa-mqq7-wxx5-mp8h
ps_checkout allows unauthorized method invocation through unvalidated parameter
High
CVE-2026-33673
PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables
Low
CVE-2026-33674
PrestaShop: Improper Use of Validation Framework
Critical
CVE-2025-69633
Improper neutralization of SQL parameters in Advanced Popup Creator module from Idnovate for PrestaShop
Medium
CVE-2026-25597
PrestaShop affected by time based enumeration in FO login form
Low
CVE-2025-61924
PrestaShop Checkout Target PayPal merchant account hijacking from backoffice
Medium
CVE-2025-61923
PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure
Critical
CVE-2025-61922
Customer account takeover via email in PrestaShop Checkout module for PrestaShop
Medium
CVE-2025-51586
Presta Shop vulnerable to email enumeration
Critical
CVE-2023-45256
Improper neutralization of SQL parameters in Monetico Paiement module from EuroInformation for PrestaShop
High
CVE-2024-6648
Absolute Path Traversal vulnerability in AP Page Builder versions prior to 4.0.0
Low
CVE-2025-24027
ps_contactinfo has potential XSS due to usage of the nofilter tag in template
Medium
CVE-2024-41670
Improperly Implemented Security Check for Standard in PayPal Official for PrestaShop
Critical
CVE-2024-36683
Improper neutralization of SQL parameter in Smart Modules - Products Alert module for PrestaShop
Critical
CVE-2024-34989
Improper neutralization of SQL parameter in RSI PDF/HTML catalog evolution (prestapdf) module for PrestaShop
High
CVE-2024-36682
Exposure of Private Personal Information to an Unauthorized Actor in Promokit.eu - Theme settings module for PrestaShop
Critical
CVE-2024-36681
Improper neutralization of SQL parameter in Promokit.eu - Isotope module for PrestaShop
Critical
CVE-2023-50029
Improper Control of Generation of Code in PrestaAddons - M4 PDF Extensions module for PrestaShop
High
CVE-2024-34992
Improper neutralization of SQL parameter in FME Modules - Help Desk - Customer Support Management System module for PrestaShop
High
CVE-2024-34991
Exposure of Private Personal Information to an Unauthorized Actor in Quadra Informatique - Axepta module for PrestaShop
Critical
CVE-2024-34988
Improper neutralization of SQL parameter in Buy Addons - Complete for Create a Quote in Frontend + Backend Pro module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.