PatchTheCVEbuy-addons vulnerabilities
Recent CVEs affecting buy-addons products. 2 tracked.
buy-addons has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-01-05. Highest priority: CVE-2023-50027 (score 58/100).
- CVE-2023-50027 CRITICAL 9.8 UPGRADE SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and bef
- CVE-2023-48925 CRITICAL 9.8 UPGRADE SQL injection vulnerability in Buy Addons bavideotab before version 1.0.6, allows attackers to escalate privil
FAQ
How do I fix buy-addons vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is buy-addons being exploited right now?
None of the tracked buy-addons CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which buy-addons CVE should I patch first?
CVE-2023-50027 currently ranks highest (58/100): SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and bef.