https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T10:31:39.018516+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-36682 CVE-2024-36682 2026-10-08T10:31:39.019944+00:00

Affected: prestashopmodules themesettings

In the module "Theme settings" (pk_themesettings) <= 1.8.8 from Promokit.eu for PrestaShop, a guest can download all email collected while SHOP is in maintenance mode. Due to a lack of permissions control, a guest can access the txt file which collect email when maintenance is enable which can lead to leak of personal information.