Do Son Urgent: PrestaShop patches a 9.3 severity XSS flaw (CVE-2026-44212) that allows unauthenticated attackers to hijack your store's back office. Update now!
PrestaShop
PrestaShop patches a 9.1 critical flaw (CVE-2025-61922) in the Checkout module. Attackers can hijack accounts via email. PoC available.
Protect your customers and your PrestaShop website from the GTAG Websocket Skimmer. Learn about this new credit card skimming threat and how to defend against it.
The vulnerability, identified as CVE-2024-36680, allows unauthorized users to inject malicious SQL code into the website's database
The PrestaShop project has recently issued a security advisory revealing two significant vulnerabilities (CVE-2024-34716 & CVE-2024-34717)
CVE-2023-30839 allows a back-office user to write, update, and delete data in the database without having the necessary permissions.
CVE-2022-36408 which could be exploited remotely is the result of a lack of proper validation of user-supplied input in SQL queries