PrestaShop vulnerabilities

CVEs per yearBy the year they were published

1. 202034
2. 20215
3. 20225
4. 202317
5. 20245
6. 20252
7. 20269

Newest CVEs

• CVE-2026-92810

  PrestaShop blockwishlist through 3.0.2 Information Disclosure

  PrestaShop · blockwishlist

  Medium5.3
• CVE-2026-92809

  PrestaShop psgdpr through 1.4.3 GDPR Log Forgery

  PrestaShop · psgdpr

  Medium5.3
• CVE-2026-84186

  Incorrect access control in PrestaShop

  PrestaShop · PrestaShop

  Medium6.9
• CVE-2026-54159

  ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

  PrestaShop · ps_facetedsearch

  Critical10.0
• CVE-2026-14846

  Incorrect neutralisation in the PrestaShop firmware

  PrestaShop · The firmware

  Medium4.5
• CVE-2026-44212

  PrestaShop: Stored XSS executable in customer service view

  PrestaShop · PrestaShop

  Critical9.3
• CVE-2026-33674

  PrestaShop: Improper Use of Validation Framework

  PrestaShop · PrestaShop

  Low2.0
• CVE-2026-33673

  PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables

  PrestaShop · PrestaShop

  High7.7
• CVE-2026-25597

  PrestaShop has a time based enumeration in FO login form

  PrestaShop · PrestaShop

  Medium5.3
• CVE-2025-1230

  Cross-Site Scripting (XSS) vulnerability in Prestashop

  Prestashop · Prestashop

  Medium4.8