Known Vulnerabilities for products from PrestaShop
Listed below are 20 of the newest known vulnerabilities associated with the vendor "PrestaShop".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-92810 json | Not Provided | 2026-09-16 | 2026-09-17 | |
| CVE-2026-92809 json | Not Provided | 2026-09-16 | 2026-09-17 | |
| CVE-2026-86405 json | Not Provided | 2026-10-09 | 2026-10-12 | |
| CVE-2026-85520 json | Not Provided | 2026-09-29 | 2026-09-29 | |
| CVE-2026-84186 json | Not Provided | 2026-09-07 | 2026-09-08 | |
| CVE-2026-54159 json | Not Provided | 2026-07-17 | 2026-07-20 | |
| CVE-2026-50986 json | Not Provided | 2026-07-31 | 2026-08-03 | |
| CVE-2026-38725 json | Not Provided | 2026-08-28 | 2026-08-28 | |
| CVE-2026-33674 json | PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation fram... | Not Provided | 2026-03-26 | 2026-04-01 |
| CVE-2026-33673 json | PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 are vulnerable to stored Cross-Sit... | Not Provided | 2026-03-26 | 2026-04-01 |
| CVE-2026-15600 json | Not Provided | 2026-09-14 | 2026-09-14 | |
| CVE-2026-7848 json | Not Provided | 2026-09-14 | 2026-09-14 | |
| CVE-2025-61924 json | PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.... | Not Provided | 2025-10-16 | 2026-10-09 |
| CVE-2025-61923 json | PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.... | Not Provided | 2025-10-16 | 2026-10-09 |
| CVE-2025-61922 json | PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. Starting in version 1.3.0 and prior... | Not Provided | 2025-10-16 | 2026-10-09 |
| CVE-2025-25692 json | A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary c... | Not Provided | 2025-07-30 | 2026-07-05 |
| CVE-2025-25691 json | A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitra... | Not Provided | 2025-07-30 | 2026-07-05 |
| CVE-2024-21628 json | 6.1 - MEDIUM | 2024-01-02 | 2024-01-08 | |
| CVE-2024-21627 json | 6.1 - MEDIUM | 2024-01-02 | 2024-01-08 | |
| CVE-2023-48926 json | 5.3 - MEDIUM | 2024-01-16 | 2024-01-23 |
Known software with vulnerabilities from PrestaShop
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Prestashop | Contactform | 1.0.1 |
| Application | Prestashop | Correos Express | 1.6 |
| Application | Prestashop | Dashboard Products | - |
| Application | Prestashop | Ebay Module | - |
| Application | Prestashop | Faceted Search Module | 1.0.0 |
| Application | Prestashop | Prestashop | - |
| Application | Prestashop | Prestashop Link | 1.0.4 |
| Application | Prestashop | Prestashop Linklist | 1.0.4 |
| Application | Prestashop | Prestashop Socialfollow | 1.0.0 |
| Application | Prestashop | Productcomments | 3.6.0 |
| Application | Prestashop | Product Comments | 3.6.0 |