Vulnerabilities

TI-2025-38273 CVE-2025-61924 · GHSA-wvpg-4wrh-5889

PrestaShop Checkout Target PayPal merchant account hijacking from backoffice

LOW 18

PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00269 Published 2025-10-16 Fixed in 4.4.1, 5.0.5 CWE-184

TI-2025-38272 CVE-2025-61923 · GHSA-fpxp-pfqm-x54w

LOW 21

PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal.

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.0092 Published 2025-10-16 Fixed in 4.4.1, 5.0.5 CWE-22

TI-2025-38271 CVE-2025-61922 · GHSA-54hq-mf6h-48xh

MEDIUM 48

PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00503 Published 2025-10-16 Fixed in 4.4.1, 5.0.5 CWE-287