MyPresta vulnerabilities
We track 4 vulnerabilities in MyPresta products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2026.
Latest MyPresta vulnerabilities
- 9.3 Critical severity
Google Merchant Center Feed: External Control of File Name or Path
Google Merchant Center Feed (gmfeed) module for PrestaShop is vulnerable to unauthenticated arbitrary file write in the feed.php endpoint. An unauthenticated attacker can send a crafted request that controls the output file name, path, extension, and content t
- 9.8 Critical severity
Manufacturers (brands) Images Block: Improper Neutralization of Special Elements used in an SQL Command
In the module mib < 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The methods `mib::getManufacturersByCategory()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.
- 9.8 Critical severity
Product Tag Icons Pro: Improper Neutralization of Special Elements used in an SQL Command
In the module "Product Tag Icons Pro" (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon() has sensitive SQL calls that can be executed with a trivial http call and explo
- 9.8 Critical severity
Product Extra Tabs Pro: Improper Neutralization of Special Elements used in an SQL Command
In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::searchcategory()`, `extratabspro::searchproduct()` and `extratabspro::searchmanufacturer().'