PrestaShop vulnerabilities
78 published CVEs name PrestaShop among the affected products.
- 78Published CVEs78 of them scored
- 10Last 12 monthspublished in the last year
- 9Critical13 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-124916
PrestaShop Performance Debug Configuration PHP Code Injection
PrestaShop · PrestaShop
Medium5.4 - CVE-2026-92810
PrestaShop blockwishlist through 3.0.2 Information Disclosure
PrestaShop · blockwishlist
Medium5.3 - CVE-2026-92809
PrestaShop psgdpr through 1.4.3 GDPR Log Forgery
PrestaShop · psgdpr
Medium5.3 - CVE-2026-84186
Incorrect access control in PrestaShop
PrestaShop · PrestaShop
Medium6.9 - CVE-2026-54159
ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE
PrestaShop · ps_facetedsearch
Critical10.0 - CVE-2026-14846
Incorrect neutralisation in the PrestaShop firmware
PrestaShop · The firmware
Medium4.5 - CVE-2026-44212
PrestaShop: Stored XSS executable in customer service view
PrestaShop · PrestaShop
Critical9.3 - CVE-2026-33674
PrestaShop: Improper Use of Validation Framework
PrestaShop · PrestaShop
Low2.0 - CVE-2026-33673
PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables
PrestaShop · PrestaShop
High7.7 - CVE-2026-25597
PrestaShop has a time based enumeration in FO login form
PrestaShop · PrestaShop
Medium5.3