Vulnerable module and CVE detection

Cross-check installed PrestaShop modules against Friends Of Presta advisories and known fixed versions so outdated components stop being invisible risk.

Modules are a major PrestaShop risk channel

Many incidents start with an outdated or abandoned module that has a public advisory. Merchants often cannot track every third-party changelog. Security Engine’s vulnerability checks bring advisory context into the back office.

What you get

Scans compare what you have installed with Friends Of Presta / CVE-oriented advisory data available to the module, highlighting modules that should be upgraded or replaced. Prioritize findings with known fixed versions and public write-ups.

Responsible use

  • Advisory coverage depends on upstream data freshness — re-check after major catalog updates.
  • A clean advisory scan does not prove custom code is safe.
  • Test module upgrades on staging when possible before production.

Vulnerability feature details Vulnerability docs