PrestaShop security vulnerabilities
CMS / eCommerce / ERP. Public CVE monitoring for PrestaShop. Vendor security advisories are linked on this page.
Built for Operators of this product.
41 public records · 0 security-fix timeline events. 0 published in the last 7 days. 29 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 3
- Medium 2
- Low 0
2026-08-045 issues2026-11-01
Known exploited
View all known exploited- Critical9.8idnovate popup_module_\(on_entering\,_exit_popup\,_add_product\)_and_newsletter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.02%Apr 12, 2023
- Critical9.8smartdatasoft smartblog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.49%Aug 24, 2021
Recently published
Browse catalog- Medium4.3Improper access control on the back-office notifications endpoint exposes customer dataOpen the advisoryAug 18, 2026
- Medium6.5SQL injection through back-office list filtersOpen the advisoryAug 18, 2026
- High7.3Client IP address can be spoofed through the X-Forwarded-For headerOpen the advisoryAug 18, 2026
- High8.0Formula injection in CSV exports (CSV injection)Open the advisoryAug 18, 2026
- High8.2Server-Side Request Forgery through image URLs in the CSV importOpen the advisoryAug 18, 2026
- Critical9.3PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.43%May 4, 2026
- High7.6PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.27%Mar 23, 2026
- Medium5.3PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.25%Mar 23, 2026
- Medium5.3Time based enumeration in FO login formCheck if you run itEPSS 0.32%Feb 3, 2026
- Medium4.1PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal.Check if you run itEPSS 0.92%Oct 16, 2025