Every public CVE, as it is published
The whole CVE List, enriched with NVD scores, CISA's known exploited catalog and EPSS exploit probabilities. Updated every few minutes; last read 7 min ago.
At a glance
Published CVEs; rejected ones are not counted.
- 405,584All CVEsplus 19,166 rejected
- 578Last 24 hours4,936 in the last 7 days
- 18,645Last 30 days1,582 of them critical
- 1,779Known exploitedin the CISA KEV catalog
CVEs published per year
All time, by publication date in UTC; follows the filter above.
- Critical
- High
- Medium
- Low
- Not scored
Show the numbers as a table
| Period | Critical | High | Medium | Low | Not scored | Total | Cumulative |
|---|---|---|---|---|---|---|---|
| 2026 | 2 | 1 | 6 | 1 | 0 | 10 | 78 |
| 2025 | 0 | 0 | 2 | 0 | 0 | 2 | 68 |
| 2024 | 1 | 1 | 3 | 0 | 0 | 5 | 66 |
| 2023 | 3 | 3 | 10 | 1 | 0 | 17 | 61 |
| 2022 | 2 | 1 | 2 | 0 | 0 | 5 | 44 |
| 2021 | 0 | 1 | 4 | 0 | 0 | 5 | 39 |
| 2020 | 1 | 6 | 27 | 0 | 0 | 34 | 34 |
| Title | ||
|---|---|---|
| CVE-2026-124916 | PrestaShop Performance Debug Configuration PHP Code InjectionPrestaShop · PrestaShop | Medium5.4 |
| CVE-2026-92810 | PrestaShop blockwishlist through 3.0.2 Information DisclosurePublic exploitPrestaShop · blockwishlist | Medium5.3 |
| CVE-2026-92809 | PrestaShop psgdpr through 1.4.3 GDPR Log ForgeryPublic exploitPrestaShop · psgdpr | Medium5.3 |
| CVE-2026-84186 | Incorrect access control in PrestaShopPrestaShop · PrestaShop | Medium6.9 |
| CVE-2026-54159 | ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCEPrestaShop · ps_facetedsearch | Critical10.0 |
| CVE-2026-14846 | Incorrect neutralisation in the PrestaShop firmwarePrestaShop · The firmware | Medium4.5 |
| CVE-2026-44212 | PrestaShop: Stored XSS executable in customer service viewPrestaShop · PrestaShop | Critical9.3 |
| CVE-2026-33674 | PrestaShop: Improper Use of Validation FrameworkPrestaShop · PrestaShop | Low2.0 |
| CVE-2026-33673 | PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variablesPrestaShop · PrestaShop | High7.7 |
| CVE-2026-25597 | PrestaShop has a time based enumeration in FO login formPrestaShop · PrestaShop | Medium5.3 |
| CVE-2025-1230 | Cross-Site Scripting (XSS) vulnerability in PrestashopPrestashop · Prestashop | Medium4.8 |
| CVE-2025-24027 | ps_contactinfo has potential XSS due to usage of the nofilter tag in templatePrestaShop · ps_contactinfo | Medium6.2 |
| CVE-2024-34717 | Anonymous PrestaShop customer can download other customers' invoicesPrestaShop · PrestaShop | Medium5.3 |
| CVE-2024-34716 | PrestaShop vulnerable to XSS via customer contact form in FO, through file uploadPrestaShop · PrestaShop | Critical9.7 |
| CVE-2024-26129 | Prestashop vulnerable to path disclosure in JavaScript variablePrestaShop · PrestaShop | Medium5.8 |
| CVE-2024-21628 | XSS can be stored in DB from "add a message form" in order detail page (FO)PrestaShop · PrestaShop | Medium5.4 |
| CVE-2024-21627 | Some attribute not escaped in Validate::isCleanHTML methodPrestaShop · PrestaShop | High8.1 |
| CVE-2023-47110 | Any value can be changed in the configuration table by an employee having access to block reassurance modulePrestaShop · blockreassurance | Critical9.1 |
| CVE-2023-47109 | PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a blockPrestaShop · blockreassurance | Medium5.5 |
| CVE-2023-43664 | Employee without any access rights can list all installed modules in PrestashopPrestaShop · PrestaShop | Medium4.3 |
| CVE-2023-43663 | Improper Privilege Management in PrestashopPrestaShop · PrestaShop | Medium6.3 |
| CVE-2022-45448 | Cross-site Scripting in M4 PDF plugin for Prestashop sitesPrestashop · M4 PDF plugin | Low3.5 |
| CVE-2022-45447 | Path Traversal in M4 PDF plugin for Prestashop sitesPrestashop · M4 PDF plugin | Medium6.5 |
| CVE-2023-39530 | PrestaShop vulnerable to file deletion via CustomerMessagePrestaShop · PrestaShop | Medium6.5 |
| CVE-2023-39529 | PrestaShop vulnerable to file deletion via attachment APIPrestaShop · PrestaShop | Medium6.7 |
| CVE-2023-39528 | PrestaShop vulnerable to file reading through path traversalPrestaShop · PrestaShop | Medium6.8 |
| CVE-2023-39527 | PrestaShop XSS vulnerability through Validate::isCleanHTML methodPrestaShop · PrestaShop | High8.3 |
| CVE-2023-39526 | PrestaShopSQL manager vulnerability (potential RCE)PrestaShop · PrestaShop | Critical9.1 |
| CVE-2023-39525 | PrestaShop vulnerable to path traversalPrestaShop · PrestaShop | Medium6.5 |
| CVE-2023-39524 | PrestaShop vulnerable to boolean SQL injection in search product in BOPrestaShop · PrestaShop | Medium6.7 |
| CVE-2023-30839 | PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"PrestaShop · PrestaShop | Critical10.0 |
| CVE-2023-30838 | PrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML methodPrestaShop · PrestaShop | High8.6 |
| CVE-2023-30545 | PrestaShop arbitrary file read vulnerabilityPrestaShop · PrestaShop | High7.7 |
| CVE-2023-25170 | PrestaShop has possible CSRF token fixationPrestaShop · PrestaShop | Medium5.0 |
| CVE-2022-46158 | Potential Information exposure in the upload directory in PrestaShopPrestaShop · PrestaShop | Medium5.3 |
| CVE-2022-35933 | PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)PrestaShop · productcomments | Medium4.3 |
| CVE-2022-31181 | Remote code execution in prestashopPublic exploitPrestaShop · PrestaShop | Critical9.8 |
| CVE-2022-31101 | SQL Injection in prestashop/blockwishlistPublic exploitPrestaShop · blockwishlist | High8.1 |
| CVE-2022-21686 | Server Side Twig Template Injection in PrestaShopPrestaShop · PrestaShop | Critical9.0 |
| CVE-2021-43789 | Blind SQLi using Search filters in PrestaShopPrestaShop · PrestaShop | High7.5 |
| CVE-2021-21418 | Potential XSS injection in the newsletter conditions fieldPrestaShop · ps_emailsubscription | Medium4.6 |
| CVE-2021-21398 | Possible XSS injection through DataColumn Grid classPrestaShop · PrestaShop | Medium5.4 |
| CVE-2021-21308 | Improper session management for soft logoutPrestaShop · PrestaShop | Medium6.1 |
| CVE-2021-21302 | CSV Injection via csv exportPrestaShop · PrestaShop | Medium6.8 |
| CVE-2020-26248 | Blind SQL injection during the CommentGrade processPublic exploitPrestaShop · productcomments | Medium6.8 |
| CVE-2020-26225 | Reflected XSS in PrestaShop Product CommentsPrestaShop · productcomments | High8.7 |
| CVE-2020-26224 | Improper Access Control in PrestaShopPrestaShop · PrestaShop | High7.5 |
| CVE-2020-15162 | Stored XSS in PrestaShopPrestaShop · PrestaShop | Medium5.4 |
| CVE-2020-15160 | Blind SQL Injection in PrestaShopPublic exploitPrestaShop · PrestaShop | Critical9.8 |
| CVE-2020-15161 | Potential XSS in PrestaShopPrestaShop · PrestaShop | Medium5.4 |