Vulnerable module and CVE detection
Cross-check installed PrestaShop modules against Friends Of Presta advisories and known fixed versions so outdated components stop being invisible risk.
Modules are a major PrestaShop risk channel
Many incidents start with an outdated or abandoned module that has a public advisory. Merchants often cannot track every third-party changelog. Security Engine’s vulnerability checks bring advisory context into the back office.
What you get
Scans compare what you have installed with Friends Of Presta / CVE-oriented advisory data available to the module, highlighting modules that should be upgraded or replaced. Prioritize findings with known fixed versions and public write-ups.
Responsible use
- Advisory coverage depends on upstream data freshness — re-check after major catalog updates.
- A clean advisory scan does not prove custom code is safe.
- Test module upgrades on staging when possible before production.