PrestaShop vulnerabilities - every known CVE across the platform and its modules
PrestaShop's modular architecture is popular with European e-commerce sites, and most disclosed CVEs trace back to third-party modules rather than core.
prestashop security
Every published CVE affecting prestashop
This list contains every CVE that names prestashop as an affected product. Records come from the official CVE feeds maintained by MITRE and NIST. Each record includes a CVSS severity score, the affected version range, and a link to the full NVD entry. New records usually appear here within minutes of publication.
Third-party plugins, extensions, and add-ons built on top of prestashop are included alongside the core product. In most CMS ecosystems, the majority of CVEs come from the extension layer rather than the core application itself. Searching by component name is just as important as searching by platform name.
Understanding CVSS scores
Severity ratings explained
Every CVE has a CVSS 3.x score from 0 to 10. The score is based on how the vulnerability can be reached (over the network or locally), how complex the exploit is, what access an attacker needs beforehand, whether a victim has to do something first, and the impact on confidentiality, integrity, and availability if the attack succeeds.
Search by component name, vendor, or keyword to filter this list. Click any CVE ID to see the full record. If your installed version falls within the affected range, update immediately or check the vendor's security advisory.
| CVE ID | Severity | CVSS | Title | Published |
|---|---|---|---|---|
| CVE-2026-14846 | medium | 4.5/10 | Jul 13, 2026 1mo ago | |
| CVE-2026-44212 | critical | 9.3/10 | May 14, 2026 3mo ago | |
| CVE-2026-33674 | low | 2.0/10 | Mar 26, 2026 5mo ago | |
| CVE-2026-33673 | high | 7.7/10 | Mar 26, 2026 5mo ago | |
| CVE-2026-25597 | medium | 5.3/10 | Feb 6, 2026 6mo ago | |
| CVE-2025-62945 | high | 7.1/10 | Oct 27, 2025 10mo ago | |
| CVE-2025-61924 | low | 3.8/10 | Oct 16, 2025 10mo ago | |
| CVE-2025-61923 | medium | 4.1/10 | Oct 16, 2025 10mo ago | |
| CVE-2025-61922 | critical | 9.1/10 | Oct 16, 2025 10mo ago | |
| CVE-2025-1230 | medium | 4.8/10 | Feb 12, 2025 1y ago | |
| CVE-2024-41670 | high | 7.5/10 | Jul 26, 2024 2y ago | |
| CVE-2024-34717 | medium | 5.3/10 | May 14, 2024 2y ago | |
| CVE-2024-34716 | critical | 9.7/10 | May 14, 2024 2y ago | |
| CVE-2024-2759 | — | — | Apr 4, 2024 2y ago | |
| CVE-2024-30511 | medium | 5.3/10 | Mar 29, 2024 2y ago | |
| CVE-2024-24837 | medium | 4.3/10 | Feb 21, 2024 2y ago | |
| CVE-2024-26129 | medium | 5.8/10 | Feb 19, 2024 2y ago | |
| CVE-2023-6921 | critical | 9.8/10 | Jan 8, 2024 2y ago | |
| CVE-2023-47109 | medium | 5.5/10 | Nov 8, 2023 2y ago | |
| CVE-2023-43664 | medium | 4.3/10 | Sep 28, 2023 2y ago | |
| CVE-2023-43663 | medium | 6.3/10 | Sep 28, 2023 2y ago | |
| CVE-2022-45448 | low | 3.5/10 | Sep 20, 2023 2y ago | |
| CVE-2022-45447 | medium | 6.5/10 | Sep 20, 2023 2y ago | |
| CVE-2023-39530 | medium | 6.5/10 | Aug 7, 2023 3y ago | |
| CVE-2023-39529 | medium | 6.7/10 | Aug 7, 2023 3y ago | |
| CVE-2023-39528 | medium | 6.8/10 | Aug 7, 2023 3y ago | |
| CVE-2023-39527 | high | 8.3/10 | Aug 7, 2023 3y ago | |
| CVE-2023-39526 | critical | 9.1/10 | Aug 7, 2023 3y ago | |
| CVE-2023-39525 | medium | 6.5/10 | Aug 7, 2023 3y ago | |
| CVE-2023-39524 | medium | 6.7/10 | Aug 7, 2023 3y ago |
