Security

Every extension and theme sold here gets its security fixes for life. This page explains how to report a vulnerability and lists the published fixes.

Report a vulnerability

Write to [email protected] and include:

  • the product, its platform and the installed version;
  • the steps to reproduce the issue;
  • the observed or possible impact.

Please give us time to release a fix before any public disclosure. We keep you informed of its progress.

This address is also listed in our security.txt file.

Published security fixes

LNK Theme Preview · PrestaShop

Fixed in 1.0.0
  • index.php guards in every folder.
  • The theme name is sanitized before building a path to theme.yml: directory traversal and the null byte are neutralized (covered by the tests).
See this version

Your cart

Your cart is empty.