Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how magento compares to other vendors in security performance

View Risk Score →

Why nested deserialization is STILL harmful – Magento RCE (CVE-2025-54236)

First published (updated )
Social
reddit

Magento Magento Long Term SupportMagento vulnerable to stored XSS in theme config fields

Risk 16
Severity
2.9
EPSS
0.13%
First published (updated )
CVE-2025-27400

The RegisterWacom says crooks probably swiped customer credit cards from its online checkout

Exploited
First published (updated )
News
The Register

BleepingComputerMagnet Goblin hackers use 1-day flaws to drop custom Linux malware

First published (updated )
News
BleepingComputer

Magento MagentoMagento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution

Risk 66
Severity
7.2
First published (updated )
CVE-2021-36036
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Magento MagentoMagento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution

Risk 66
Severity
7.2
First published (updated )
CVE-2021-36021

Magento MagentoMagento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution

Risk 72
Severity
9.1
First published (updated )
CVE-2021-36023

Adobe Commerce[CVE-2021-36032] Magento IDOR Leads to Account Takeover

Risk 82
Severity
8.8
First published (updated )
CVE-2022-42344

Adobe CommerceAdobe Commerce Improper Access Control Security feature bypass

Risk 28
Severity
5.3
First published (updated )
CVE-2022-34259

Adobe CommerceAdobe Commerce Stored XSS Arbitrary code execution

Risk 39
Severity
6.1
First published (updated )
CVE-2022-34257
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Adobe CommerceAdobe Commerce XML Injection Arbitrary code execution

Risk 75
Severity
9.1
First published (updated )
CVE-2022-34253

Adobe CommerceAdobe Commerce Improper Access Control Privilege escalation

Risk 82
Severity
8.8
First published (updated )
CVE-2022-34255

Adobe CommerceAdobe Commerce Improper Limitation of a Pathname to a Restricted Directory Arbitrary code execution

Risk 82
Severity
8.8
First published (updated )
CVE-2022-34254

Adobe CommerceAdobe Commerce Improper Authorization Privilege escalation

Risk 89
Severity
9.8
First published (updated )
CVE-2022-34256

Adobe CommerceAdobe Commerce Stored XSS Arbitrary code execution

Risk 34
Severity
5.5
First published (updated )
CVE-2022-34258
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Adobe CommerceAdobe Commerce checkout improper input validation leads to remote code execution

Risk 100
Severity
9.8
Exploited
First published (updated )
CVE-2022-24086

composer/magento/community-editionMagento Commerce improper authorization allows an authenticated user to perform certain functions without permission

Risk 40
Severity
6.5
First published (updated )
CVE-2021-28567

composer/magento/community-editionMagento Commerce information disclosure during upload action leveraging a specially crafted file

Risk 22
Severity
4
First published (updated )
CVE-2021-28566

Magento MagentoMagento Commerce path traversal vulnerability in child theme store creation

Risk 69
Severity
7.2
First published (updated )
CVE-2021-28584

Magento MagentoMagento Commerce improper input validation in customer customer webapi

Risk 28
Severity
5.3
First published (updated )
CVE-2021-28585
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Magento MagentoMagento Commerce insecure storage of sensitive documentation

Risk 45
Severity
7.5
First published (updated )
CVE-2021-28583

Magento MagentoMagento Commerce improper Authorization via the 'Create Customer' endpoint

Risk 41
Severity
6.5
First published (updated )
CVE-2021-28563

Magento MagentoMagento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution

Risk 45
Severity
6.9
First published (updated )
CVE-2021-28556

Magento UPWARD ConnectorMagento UPWARD-php Path traversal vulnerability via UPWARD Connector

Risk 30
Severity
4.9
First published (updated )
CVE-2021-21064

Magento MagentoMagento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution

Risk 75
Severity
9.1
First published (updated )
CVE-2021-21014
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Magento MagentoMagento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution

Risk 75
Severity
9.1
First published (updated )
CVE-2021-21016

Magento MagentoMagnto Commerce Unauthorized Data Modification Could Lead To Arbitrary Code Execution

Risk 75
Severity
9.1
First published (updated )
CVE-2021-21018

Magento MagentoMagento Commerce Failure To Invalidate User Session Could Lead To Unauthorized Access

Risk 52
Severity
7.5
First published (updated )
CVE-2021-21032

Magento MagentoMagento Commerce XML Injection Could Lead To Arbitrary Code Execution

Risk 75
Severity
9.1
First published (updated )
CVE-2021-21025

Magento MagentoMagento Commerce Reflected Cross-site Scripting Vulnerability Could Lead To Arbitrary JavaScript Execution

Risk 30
Severity
4.8
First published (updated )
CVE-2021-21029
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203