CVE Intelligence

Vulnerabilidades do Prestashop Blockwishlist

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Prestashop Blockwishlist: 1 registro(s), com versões afetadas e correções.

CVE-2026-92810 Média · 4.3 CWE-639 16/09/2026
PrestaShop blockwishlist through 3.0.2 Information Disclosure
PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in the getUrlByIdWishListAction method, allowing authenticated customers to retrieve share tokens for any wishlist by identifier. Attackers can supply sequential wishlist identifiers to obtain valid share links and read other customers' private wishlist contents.