Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
- H
Incorrect AuthorizationCVE-2025-54263
Affects magento/community-edition | Versions <2.4.6-p13>=2.4.7-beta1, <2.4.7-p8>=2.4.8-beta1, <2.4.8-p3>=2.4.9-alpha1, <2.4.9-alpha3
Has fix
ComposerPublished 23 Oct 2025
- M
Cross-site Scripting (XSS)CVE-2025-54266
Affects magento/community-edition | Versions <2.4.6-p13>=2.4.7-beta1, <2.4.7-p8>=2.4.8-beta1, <2.4.8-p3>=2.4.9-alpha1, <2.4.9-alpha3
Has fix
ComposerPublished 23 Oct 2025
- H
Incorrect AuthorizationCVE-2025-54267
Affects magento/community-edition | Versions <2.4.6-p13>=2.4.7-beta1, <2.4.7-p8>=2.4.8-beta1, <2.4.8-p3>=2.4.9-alpha1, <2.4.9-alpha3
Has fix
ComposerPublished 23 Oct 2025
- H
Incorrect AuthorizationCVE-2025-54265
Affects magento/community-edition | Versions <2.4.6-p13>=2.4.7-beta1, <2.4.7-p8>=2.4.8-beta1, <2.4.8-p3>=2.4.9-alpha1, <2.4.9-alpha3
Has fix
ComposerPublished 21 Oct 2025
- C
Improper Input ValidationCVE-2025-54236
Affects magento/community-edition | Versions <2.4.7-p8
Has fix
ComposerPublished 19 Sept 2025
- M
Path TraversalCVE-2025-49559
Affects magento/community-edition | Versions <2.4.5-p14>=2.4.6, <2.4.6-p12>=2.4.7-beta1, <2.4.7-p7>=2.8.4-beta1, <2.8.4-p1
Has fix
ComposerPublished 5 Sept 2025
- H
Time-of-check Time-of-use (TOCTOU) Race ConditionCVE-2025-49558
Affects magento/community-edition | Versions <2.4.5-p14>=2.4.6, <2.4.6-p12>=2.4.7-beta1, <2.4.7-p7>=2.8.4-beta1, <2.8.4-p1
Has fix
ComposerPublished 5 Sept 2025
- H
Incorrect AuthorizationCVE-2025-49556
Affects magento/community-edition | Versions <2.4.5-p14>=2.4.6, <2.4.6-p12>=2.4.7-beta1, <2.4.7-p7>=2.8.4-beta1, <2.8.4-p1
Has fix
ComposerPublished 5 Sept 2025
- H
Cross-Site Request Forgery (CSRF)CVE-2025-49555
Affects magento/community-edition | Versions <2.4.5-p14>=2.4.6, <2.4.6-p12>=2.4.7-beta1, <2.4.7-p7>=2.8.4-beta1, <2.8.4-p1
Has fix
ComposerPublished 5 Sept 2025
- H
Improper Input ValidationCVE-2025-49554
Affects magento/community-edition | Versions <2.4.5-p14>=2.4.6, <2.4.6-p12>=2.4.7-beta1, <2.4.7-p7>=2.8.4-beta1, <2.8.4-p1
Has fix
ComposerPublished 5 Sept 2025
- H
Cross-site Scripting (XSS)CVE-2025-49557
Affects magento/community-edition | Versions <2.4.5-p14>=2.4.6, <2.4.6-p12>=2.4.7-beta1, <2.4.7-p7>=2.8.4-beta1, <2.8.4-p1
Has fix
ComposerPublished 5 Sept 2025
- M
Cross-site Scripting (XSS)CVE-2025-47110
Affects magento/community-edition | Versions >=2.4.5, <2.4.5-p13>=2.4.6-p1, <2.4.6-p11>=2.4.7-beta1, <2.4.7-p6>=2.4.8-beta1, <2.4.8-p1
Has fix
ComposerPublished 26 Jun 2025
- M
Incorrect AuthorizationCVE-2025-27188
Affects magento/community-edition | Versions <2.4.4-p13>=2.4.5, <2.4.5-p12>=2.4.6, <2.4.6-p10>=2.4.7-beta1, <2.4.7-p5>=2.4.8-beta1, <2.4.8-beta2
Has fix
ComposerPublished 19 Jun 2025
- M
Information ExposureCVE-2023-29287
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- C
Command InjectionCVE-2024-20720
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p7>=2.4.5-p1, <2.4.5-p6>=2.4.6-p1, <2.4.6-p4
Has fix
ComposerPublished 5 Mar 2025
- H
SQL InjectionCVE-2023-38249
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p6>=2.4.5-p1, <2.4.5-p5>=2.4.6-p1, <2.4.6-p3>=2.4.7-beta1, <2.4.7-beta2
Has fix
ComposerPublished 5 Mar 2025
- H
Incorrect AuthorizationCVE-2023-38209
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p5>=2.4.5-p1, <2.4.5-p4>=2.4.6-p1, <2.4.6-p2
Has fix
ComposerPublished 5 Mar 2025
- H
SQL InjectionCVE-2023-38250
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p6>=2.4.5-p1, <2.4.5-p5>=2.4.6-p1, <2.4.6-p3>=2.4.7-beta1, <2.4.7-beta2
Has fix
ComposerPublished 5 Mar 2025
- M
Cross-site Scripting (XSS)CVE-2023-22249
Affects magento/community-edition | Versions <2.4.4-p3>=2.4.5-p1, <2.4.5-p2
Has fix
ComposerPublished 5 Mar 2025
- H
XML InjectionCVE-2023-29289
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- H
Incorrect AuthorizationCVE-2023-38218
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p6>=2.4.5-p1, <2.4.5-p5>=2.4.6-p1, <2.4.6-p3>=2.4.7-beta1, <2.4.7-beta2
Has fix
ComposerPublished 5 Mar 2025
- H
Incorrect AuthorizationCVE-2023-22248
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- C
Improper Input ValidationCVE-2024-20758
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p8>=2.4.5-p1, <2.4.5-p7>=2.4.6-p1, <2.4.6-p5>=2.4.7-beta1, <2.4.7
Has fix
ComposerPublished 5 Mar 2025
- C
Command InjectionCVE-2023-38208
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p5>=2.4.5-p1, <2.4.5-p4>=2.4.6-p1, <2.4.6-p2
Has fix
ComposerPublished 5 Mar 2025
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- M
Access Control BypassCVE-2023-29294
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- M
Incorrect AuthorizationCVE-2023-29288
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- M
Incorrect AuthorizationCVE-2023-29295
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- M
Incorrect AuthorizationCVE-2023-29296
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p4>=2.4.5-p1, <2.4.5-p3
Has fix
ComposerPublished 5 Mar 2025
- M
Denial of Service (DoS)CVE-2024-20716
Affects magento/community-edition | Versions >=2.4.4-p1, <2.4.4-p7>=2.4.5-p1, <2.4.5-p6>=2.4.6-p1, <2.4.6-p4
Has fix
ComposerPublished 5 Mar 2025