← Back to all sparks
PrestaShop logo

PrestaShop

E-COMM
Velocity5.0

Open source ecommerce platform

PrestaShop patches 33 vulnerabilities across 9.2.1 and 8.2.9 on the same day.

ecommercephp-securityopen-sourcemaintenance-releasescheckout
◆Current state
PrestaShop 9.2 reached stable on September 30 with One Page Checkout, the Ask AI back-office assistant and Extra Properties. On November 9 the project shipped 9.2.1 with eighteen security fixes and 8.2.9 with fifteen, both from coordinated disclosure. The October core monthly describes a maturing Admin API and performance work on the develop branch.
◆Where it's heading
After the 9.2 feature cycle, the project is in a maintenance phase that keeps two branches patched at once. The 8.2 line is still receiving security releases, so merchants on older installs are not yet being forced onto 9.x.
◆Prediction
Expect published advisories for the November fixes and further 9.2.x patch releases while Admin API work continues toward the next minor version.

◆Recent moves

  1. 2d ago

    PS Summit 2026: the first PrestaShop Community Awards

    The first PrestaShop Community Awards, announced at PS Summit 2026, recognise contributors and teams from the year. It is community news that follows the 9.2.1 and 8.2.9 security releases and changes nothing in the software.

    View source ↗
  2. 5d ago

    PrestaShop 9.2.1 is available

    The first patch to 9.2 carries eighteen security fixes, two back-office bug fixes and dependency updates. It turns the 9.2 feature release into the branch merchants should actually run.

    View source ↗
  3. 5d ago

    PrestaShop 8.2.9 is available

    Fifteen vulnerabilities fixed in the 8.2 branch, released alongside 9.2.1. It shows the older branch is still supported for security, which matters for merchants not ready to move to 9.x.

    View source ↗
  4. 11d ago

    PrestaShop Core Monthly - October 2026

    The October core monthly reports a maturing Admin API, performance work and new features on the develop branch. It is a project newsletter after the 9.2 release, pointing toward the next cycle rather than shipping anything itself.

    View source ↗
  5. 24d ago

    Critical PHP security updates: what PrestaShop users need to know

    Guidance for merchants on two critical PHP fixes from October 21, explaining how they relate to PrestaShop. The entry's summary announces no PrestaShop release.

    View source ↗
  6. 1mo ago

    PrestaShop Core Monthly - September 2026

    A monthly recap of 9.2, Hummingbird 2.1.2 and native module releases, with PS Summit a month away. It reports the cycle rather than adding to it.

    View source ↗