Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-92810

PrestaShop blockwishlist through 3.0.2 Information Disclosure

PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for any wishlist by identifier. Attackers can supply sequential wishlist identifiers to obtain valid share links and read other customers' private wishlist contents.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Prestashop
Products
Blockwishlist
CVE-2022-31101

SQL Injection in prestashop/blockwishlist

prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are no known workarounds for this issue.

CVSS 3.1 · 8.1 High EPSS 23.5% KEV · Not listed
Vendors
Prestashop
Products
Blockwishlist