https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-46351.htmlhttps://patchthecve.com/cve/CVE-2023-46351.htmlWed, 17 Jun 2026 06:30:42 +0000CRITICAL 9.8: In the module mib < 1.6.1 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The methods `mib::getManufacturersByCategory()` has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.https://patchthecve.com/cve/CVE-2023-46353.htmlhttps://patchthecve.com/cve/CVE-2023-46353.htmlWed, 17 Jun 2026 06:30:42 +0000CRITICAL 9.8: In the module "Product Tag Icons Pro" (ticons) before 1.8.4 from MyPresta.eu for PrestaShop, a guest can perform SQL injection. The method TiconProduct::getTiconByProductAndTicon() has sensitive SQL calls that can be executed with a trivial http call and exploited to forge a SQL injection.https://patchthecve.com/cve/CVE-2023-45386.htmlhttps://patchthecve.com/cve/CVE-2023-45386.htmlWed, 17 Jun 2026 06:28:44 +0000CRITICAL 9.8: In the module extratabspro before version 2.2.8 from MyPresta.eu for PrestaShop, a guest can perform SQL injection via `extratabspro::searchcategory()`, `extratabspro::searchproduct()` and `extratabspro::searchmanufacturer().'