Vendors / MyPresta Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 6
CVSS high 0
Exploited now MyPresta records in CISA KEV No MyPresta vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::searchcategory()`, `extratabspro::searchproduct()` and `extratabspro::searchmanufactur…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0077 · Published 2023-10-17 · No fix listed CWE-89
Priority MEDIUM 50
Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00991 · Published 2026-09-29 · No fix listed CWE-73
Priority MEDIUM 50
In the module "Product Tag Icons Pro" (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00766 · Published 2023-12-06 · No fix listed CWE-89
Priority MEDIUM 49
In the module mib < 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00518 · Published 2024-01-19 · No fix listed CWE-89
Priority MEDIUM 48
modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to execute arbitrary code by uploading a php file via modules/orderfiles/upload.ph…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03496 · Published 2018-11-19 · No fix listed CWE-434
Priority MEDIUM 44
The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0107 · Published 2021-09-08 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
6 0 0 0 0
THREATIST.IORead the docs