Skip to content
OpenAdvisories

Product · PrestaShop

blockwishlist

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-92810

    PrestaShop blockwishlist through 3.0.2 Information Disclosure

    PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for any wishlist by identifier. Attackers can supply sequential wishlist identifiers …

    PrestaShop blockwishlist