CVE-2024-2759: Improper access control in Apaczka plugin for PrestaShop

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-04-04 · updated 2026-06-17
Weakness: CWE-552

Description

Improper access control vulnerability in Apaczka plugin for PrestaShop allows information gathering from saved templates without authentication.This issue affects Apaczka plugin for PrestaShop from v1 through v4.

Affected products

Prestashopmodules Apaczka: from 1.0 through 4.0

References

https://cert.pl/en/posts/2024/04/CVE-2024-2759/
https://cert.pl/posts/2024/04/CVE-2024-2759/
https://cert.pl/en/posts/2024/04/CVE-2024-2759/
https://cert.pl/posts/2024/04/CVE-2024-2759/

Get alerted when CVE-2024-2759 or the next vulnerability affects your stack