Sploitus

86 exploited vulnerabilities in Prestashop

Showing 1–50 of 86, highest-scoring first

Vendors
Unknown, Prestashop, Jmsblog, Cdesigner, Droppy, Pireospay
With known exploits
86
Affected Prestashop versions
< 8.1.6, 1.7.8.7, 1.7.8.9, 8.0.4, 8.1.7, 1.7.7.0, 1.7.6.8, 1.6, 1.7, 1.7.0.0, 1.6.1.23, 1.7.4.4, 1.7.8.10, 8.0.5, 8.1.0, 1.6.1.20, 1.7.3.4, 1.7.8.3, 1.5.5.0, 1.7.2.5
Affected Buy-addons Bazoom Magnifier versions
≤ 1.0.16
Affected Joommasters Jms Blog versions
= 2.5.5, 2.5.6
Affected Promokit Pk Themesettings versions
≤ 1.8.8
Affected Sunnytoo Product Comments versions
< 1.0.6
Affected Joommasters Jmssetting versions
≤ 1.1.0
Affected Store-opart Op\'art Devis versions
≤ 4.6.12
Affected Hipresta Carousels Pack versions
< 1.5.1

Vulnerabilities with exploits

Highest CVSS first — 11 of these already have exploit code on Sploitus

CVE-2024-34716 2 exploits
CVSS 10.0 CRITICAL 2024-05-14FIX AVAILABLE
Exploit for Cross-site Scripting in PrestashopExploit for Cross-site Scripting in Prestashop
CVE-2023-50027
CVSS 10.0 CRITICAL 2023-09-30
CVE-2023-27034
CVSS 10.0 CRITICAL 2023-03-23
CVE-2022-31181 2 exploits
CVSS 10.0 CRITICAL 2022-07-29FIX AVAILABLE
Exploit for SQL Injection in PrestashopExploit for SQL Injection in Prestashop
CVE-2023-30839 2 exploits
CVSS 9.9 CRITICAL 2023-04-25FIX AVAILABLE
Exploit for SQL Injection in PrestashopExploit for SQL Injection in Prestashop
CVE-2024-41651
CVSS 9.8 CRITICAL 2024-08-12
CVE-2024-36678
CVSS 9.8 CRITICAL 2024-06-19FIX AVAILABLE
CVE-2024-28388
CVSS 9.8 CRITICAL 2024-03-14FIX AVAILABLE
CVE-2023-50030
CVSS 9.8 CRITICAL 2024-01-19FIX AVAILABLE
CVE-2023-48188
CVSS 9.8 CRITICAL 2023-11-27
CVE-2023-45376
CVSS 9.8 CRITICAL 2023-10-19
CVE-2023-34577
CVSS 9.8 CRITICAL 2023-09-21
CVE-2023-34575
CVSS 9.8 CRITICAL 2023-09-20
CVE-2023-31672
CVSS 9.8 CRITICAL 2023-06-15FIX AVAILABLE
CVE-2023-30192
CVSS 9.8 CRITICAL 2023-05-11
CVE-2023-30149
CVSS 9.8 CRITICAL 2023-06-02FIX AVAILABLE
CVE-2023-28843 1 exploit
CVSS 9.8 CRITICAL 2023-03-31FIX AVAILABLE
CVE-2023-28843
CVE-2023-27033
CVSS 9.8 CRITICAL 2023-04-07
CVE-2023-26865
CVSS 9.8 CRITICAL 2023-04-24
CVE-2023-26861
CVSS 9.8 CRITICAL 2023-07-11
CVE-2023-26858
CVSS 9.8 CRITICAL 2023-03-31
CVE-2023-25207
CVSS 9.8 CRITICAL 2023-03-13FIX AVAILABLE
CVE-2022-36408 2 exploits
CVSS 9.8 CRITICAL 2022-07-23FIX AVAILABLE
Exploit for SQL Injection in PrestashopExploit for SQL Injection in Prestashop
CVE-2021-3110
CVSS 9.8 CRITICAL 2021-01-20
CVE-2020-15160 3 exploits
CVSS 9.8 CRITICAL 2020-09-24FIX AVAILABLE
PrestaShop 1.7.6.7 - (location) Blind Sql Injection ExploitPrestaShop 1.7.6.7 - 'location' Blind Sql Injection
CVE-2019-19594
CVSS 9.8 CRITICAL 2019-12-05FIX AVAILABLE
CVE-2018-8824
CVSS 9.8 CRITICAL 2018-05-10FIX AVAILABLE
CVE-2018-8823
CVSS 9.8 CRITICAL 2018-03-28FIX AVAILABLE
CVE-2018-19355
CVSS 9.8 CRITICAL 2018-11-19FIX AVAILABLE
CVE-2018-19126 4 exploits
CVSS 9.8 CRITICAL 2018-11-09FIX AVAILABLE
PrestaShop 1.6.x/1.7.x - Remote Code Execution ExploitPrestaShop 1.6.x / 1.7.x Remote Code Execution
CVE-2018-10942
CVSS 9.8 CRITICAL 2018-05-10FIX AVAILABLE
CVE-2026-44212
CVSS 9.3 CRITICAL 2026-05-08FIX AVAILABLE
CVE-2023-39526
CVSS 9.1 CRITICAL 2023-08-07FIX AVAILABLE
CVE-2018-13784 4 exploits
CVSS 9.1 CRITICAL 2018-07-09FIX AVAILABLE
PrestaShop < 1.6.1.19 - BlowFish ECD Privilege Escalation ExploitPrestaShop < 1.6.1.19 - AES CBC Privilege Escalation Exploit
CVE-2022-21686
CVSS 9.0 CRITICAL 2022-01-26FIX AVAILABLE
CVE-2013-6358
CVSS 9.0 HIGH 2020-01-23FIX AVAILABLE
CVE-2023-45375
CVSS 8.8 HIGH 2023-10-16FIX AVAILABLE
CVE-2022-46965
CVSS 8.8 HIGH 2023-02-02FIX AVAILABLE
CVE-2018-20717
CVSS 8.8 HIGH 2019-01-15FIX AVAILABLE
CVE-2023-30838 2 exploits
CVSS 8.5 HIGH 2023-04-25FIX AVAILABLE
Exploit for SQL Injection in PrestashopExploit for SQL Injection in Prestashop
CVE-2023-39527
CVSS 8.3 HIGH 2023-08-07FIX AVAILABLE
CVE-2024-21627
CVSS 8.1 HIGH 2024-01-02FIX AVAILABLE
CVE-2023-30545 2 exploits
CVSS 7.7 HIGH 2023-04-25FIX AVAILABLE
Exploit for SQL Injection in PrestashopExploit for SQL Injection in Prestashop
CVE-2026-33673
CVSS 7.6 HIGH 2026-03-25FIX AVAILABLE
CVE-2024-41670
CVSS 7.5 HIGH 2024-07-26FIX AVAILABLE
CVE-2021-43789 2 exploits
CVSS 7.5 HIGH 2021-12-07FIX AVAILABLE
Exploit for SQL Injection in PrestashopExploit for SQL Injection in Prestashop
CVE-2020-26224
CVSS 7.5 HIGH 2020-11-16FIX AVAILABLE
CVE-2020-12120
CVSS 7.5 HIGH 2020-04-27FIX AVAILABLE
CVE-2013-6295
CVSS 7.5 HIGH 2020-02-18FIX AVAILABLE
CVE-2019-13461
CVSS 7.5 HIGH 2019-07-09FIX AVAILABLE