Shopping Cart
Free PrestaShop module
Do you know what an attacker can see of your shop?
WSC Security Check goes through your PrestaShop store and tells you in plain words what is wrong, how urgent it is, and what to do about it.
- Modules and PrestaShop versions with known vulnerabilities
- Logs, backups and exports anyone can download
- Signs of a hack: modified files, hidden code
PrestaShop 1.7.8 – 9.1 · PHP 7.2+ · changes nothing in your shop
61/ 100
Your shop's security score
14 findings, 2 of them urgent
CRITICALAnyone can download the files in /modules/…/logs
MEDIUM3 employee accounts unused for 90 days
Example. Every finding says why it matters and what to do.
Most shops are not brought down by big, spectacular attacks
They fall to a forgotten module nobody has updated in years. A log file full of customer email addresses that anyone can download. A former colleague's account that still works.
None of this shows up in the back office, and an online scanner will not find it either: it only sees what your storefront shows from the outside.
The module looks at the shop from the inside: the PrestaShop and PHP versions, the real version of every module, the folders and the settings. Whatever looks downloadable, it actually tries on your shop's own address, so it does not guess.
What it checks
Five areas, one score, one to-do list
Four areas are worth 25 points each, 0–100 in total. The fifth is signs of a hack: if it finds one, it does not score it but warns you with a red banner.
25 points
PrestaShop and PHP
Known flaws in your PrestaShop version, whether your PHP still gets security fixes, debug mode left on, a forgotten install folder, employee accounts nobody uses.
25 points
Modules
Every module is checked against public vulnerability lists by the real version in its files, including disabled modules and ones that were only uploaded.
25 points
Exposed files
Module logs, backups, exports, .env and .git in the web root, error_log files. For everything it finds, it checks whether it can really be downloaded from outside.
25 points
Server and settings
HTTPS and the certificate, security headers, rate limiting on search, spam protection, world-writable (777) folders.
Red banner
Signs of a hack
It compares your PrestaShop files with the official release and shows what changed. It looks for hidden code, PHP files planted among images, injected scripts and new, unknown admin accounts.
In plain words
What to do
Findings are sorted by severity, and each answers three questions: what we found, why it matters, and what to do. Anything that is fine in your case can be taken off the list with “I know, it is fine”.
How it works
Four steps, no developer needed
- DownloadEnter your email address and the download starts.
- InstallModules → Module Manager → Upload a module, like any other module.
- RunAdvanced Parameters → Security check → “Start the security check”. It runs on shared hosting too, because it works in small steps.
- FixWork through the list, most urgent first. You can also download the result as a text file.
It does not touch your shop
- Read-only. It deletes, fixes and rewrites nothing. Fixing is always your decision.
- No customer data leaves your shop. For updates, the module sends WSC its own version and your shop's address, nothing else.
- You decide what you send. If you send us your findings with the “Ask for help” button, it shows you exactly what will be sent first, and sends only with your consent.
Stuck? We will help
You do not need to be a developer to understand the result, but some fixes are a job for an expert. One button in the module sends us your findings, and the WSC team will get in touch with you.
Download it free
Enter your email address and the download starts. We will email you the download link as well.
We only send newsletters if you opt in separately, and you can unsubscribe at any time.
Your download is starting. If it does not, click here.
Upload the module to your shop from a computer (Modules → Module Manager → Upload a module). The link is in your email too.
If you need more
Finding problems is free. Fixing them can be easy too.
WSC Security Pro coming soon
Fixes most findings in one click, with a backup and an undo. It runs every day on its own and emails you when something changes.
WSC maintenance
If you would rather not deal with it, we fix the whole list for you and check your shop regularly.
Frequently asked questions
Which PrestaShop versions does it support?
PrestaShop 1.7.8 to 9.1, with PHP 7.2 or newer.
Will it slow down my shop?
No. The scan only runs when you start it, and it works in short slices so it stays within the server's time limit even on shared hosting. Your customers will not notice anything.
How long does it take?
It depends on the size of the shop and the hosting: the more modules and files, the longer it takes. A progress bar shows where it is, and the page has to stay open meanwhile.
Is it really free? What is the catch?
The module is free; in return we ask for your email address. The Pro version that does the fixing and our maintenance service are paid, but you need neither to use the scan.
What should I do if I see a red banner?
Do not panic, but do not put it off either. The module shows you which file it is and what is in it. If you cannot judge it, press “Ask for help” and we will get back to you.
If my score is 100, am I safe?
You are in good shape as far as known, common problems go, but no tool can guarantee complete security. The module looks for known issues, so run it again from time to time: the vulnerability lists keep growing.
WSC Security Check looks for known security issues and does not guarantee that a shop is completely secure. Any fix is the decision and responsibility of the shop's operator. Vulnerability data sources: Friends of Presta, OSV / GitHub Advisory Database, endoflife.date, PrestaShop.