Critical
CVE-2026-54159
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 91
Reset filters
High
CVE-2026-39079
Sensitive data exposure via publicly accessible logs in upsshipping module from Agence Web 360 for PrestaShop
Critical
CVE-2026-44212
PrestaShop has a stored XSS executable in customer service view
Critical
CVE-2025-61922
Customer account takeover via email in PrestaShop Checkout module for PrestaShop
Medium
CVE-2025-51586
Presta Shop vulnerable to email enumeration
Critical
CVE-2023-45256
Improper neutralization of SQL parameters in Monetico Paiement module from EuroInformation for PrestaShop
Low
CVE-2025-24027
ps_contactinfo has potential XSS due to usage of the nofilter tag in template
High
CVE-2024-36682
Exposure of Private Personal Information to an Unauthorized Actor in Promokit.eu - Theme settings module for PrestaShop
Critical
CVE-2024-36681
Improper neutralization of SQL parameter in Promokit.eu - Isotope module for PrestaShop
High
CVE-2024-34991
Exposure of Private Personal Information to an Unauthorized Actor in Quadra Informatique - Axepta module for PrestaShop
Critical
CVE-2024-36680
Improper neutralization of SQL parameter in Promokit.eu - Facebook module for PrestaShop
Critical
CVE-2024-36678
Improper neutralization of SQL parameter in Promokit.eu - Theme settings module for PrestaShop
Critical
CVE-2024-36684
Improper neutralization of SQL parameter in Promokit.eu - Custom links module for PrestaShop
Critical
CVE-2024-34716
PrestaShop cross-site scripting via customer contact form in FO, through file upload
High
CVE-2024-33274
Improper Limitation of a Pathname to a Restricted Directory in FME Modules - Custom Checkout Fields, Add Custom Fields to Checkout module for PrestaShop
High
CVE-2024-33271
Exposure of Private Personal Information to an Unauthorized Actor in FME Modules - Events Manager, Create events & Sell tickets Online module for PrestaShop
Critical
CVE-2024-33266
Improper neutralization of SQL parameter in Helloshop - Tracking Center - Parcel tracking 80 carriers module for PrestaShop
High
CVE-2024-28387
Exposure of Private Personal Information to an Unauthorized Actor in Axonaut module for PrestaShop
High
CVE-2024-28392
Improper neutralization of SQL parameter in Abandoned Cart Reminder Pro module for PrestaShop
Critical
CVE-2024-28395
Improper neutralization of SQL parameter in Best-Kit - Pop-up / Schedule Popup / Splash window module for PrestaShop
Critical
CVE-2024-28389
Improper neutralization of SQL parameters in Knowband - Entry,Exit and Subscription Popup-Spin and Win module for PrestaShop
Critical
CVE-2024-25847
Improper neutralization of SQL parameter in MyPrestaModules - Product Catalog (CSV, Excel) Import module for PrestaShop
Critical
CVE-2024-25841
Improper Neutralization of Input During Web Page Generation in Common-Services - So Flexibilite module for PrestaShop
Critical
CVE-2024-25846
Unrestricted Upload of File with Dangerous Type in MyPrestaModules - Product Catalog (CSV, Excel) Import module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.