prestashop/blockwishlist
PrestaShop module blockwishlist
78%
Total Score
healthy
Healthy overall, with workflow hygiene gaps from unpinned actions and high-confidence template-injection findings.
Health Score Breakdown
The package has been published since March 2021 with nine releases and a latest release in July 2026, though only one release appeared in the last 12 months and the median interval is about 187 days.
No repository security policy was found, leaving vulnerability-reporting guidance less transparent for consumers and contributors.
All five workflows were analyzed without untrusted checkouts or script-injection findings, and one scopes permissions at job level. However, all 35 action references are unpinned, one archived action was detected, and high-confidence template-injection findings require workflow review; these are automation hygiene concerns rather than a standalone dependency verdict.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2022-31101 prestashop/blockwishlist is vulnerable to Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in versions 2.0.0 - 2.1.1. | 2.0.0 - 2.1.1 | High |
Package versions
Maintainers
 PrestaShop SA |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.