Lucene search
+L

CVE-2025-61922

🗓️ 16 Oct 2025 17:26:14Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 77 Views🌐 WEB

PrestaShop Checkout before 4.4.1 and 5.0.5 allowed silent login by email, enabling account takeover; fixed.

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
circl
Circl
CVE-2025-61922
2 Jan 202621:00
–circl
cnnvd
CNNVD
PrestaShop Checkout Authorization Issue Vulnerability
16 Oct 202500:00
–cnnvd
cvelist
Cvelist
CVE-2025-61922 PrestaShop Checkout allows customer account takeover via email
16 Oct 202517:26
–cvelist
euvd
EUVD
EUVD-2025-34790
16 Oct 202519:56
–euvd
githubexploit
GithubExploit
Exploit for Improper Authentication in Prestashop Prestashop_Checkout
2 Jan 202617:29
–githubexploit
github
Github Security Blog
PrestaShop Checkout allows customer account takeover via email
16 Oct 202519:56
–github
kitploit
Kitploit
Vulnerability-Playground-CVE-2025-61922
30 Oct 202615:10
–kitploit
kitploit
Kitploit
CVE-2025-61922-PoC
29 Oct 202620:24
–kitploit
mend
Mend
CVE-2025-61922
16 Oct 202517:26
–mend
nvd
NVD
CVE-2025-61922
16 Oct 202518:15
–nvd
Rows per page
NVD
Node
OR
prestashopprestashop_checkoutRange1.3.0–7.4.4.1prestashop
prestashopprestashop_checkoutRange7.5.0.1–7.5.0.5prestashop
prestashopprestashop_checkoutRange8.3.1.0–8.4.4.1prestashop
prestashopprestashop_checkoutRange8.5.0.0–8.5.0.5prestashop
prestashopprestashop_checkoutRange9.4.3.1–9.5.0.5prestashop
[
  {
    "vendor": "PrestaShopCorp",
    "product": "ps_checkout",
    "versions": [
      {
        "version": ">= 1.3.0, < 4.4.1",
        "status": "affected"
      },
      {
        "version": ">= 5.0.0, < 5.0.5",
        "status": "affected"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
emailrequest body/module/ps_checkout/ExpressCheckoutUnauthenticated login via PrestaShop Checkout ExpressCheckout endpoint using victim email (zero-click).CWE-287

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

09 Oct 2026 10:10Current
5.9Medium risk
Vulners AI Score5.9
CVSS 3.19.1
EPSS0.00503
SSVC
77