Exposure of Magento

CMS, Ecommerce
499
exposure score
32,588
sites use
4
exploited
39
critical

CVEs

361 results
CVE-2023-29287MEDIUMAdobe Commerce Information Exposure Security feature bypassEPSS 0.7%CVE-2026-47998MEDIUMAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.7%CVE-2026-47997MEDIUMAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.7%CVE-2021-32684MEDIUMMissing Handler in @scandipwa/magento-scriptsEPSS 0.7%CVE-2026-47994HIGHAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.7%CVE-2026-48413HIGHAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.7%CVE-2026-40488HIGHOpenMage LTS has Customer File Upload Extension Blocklist Bypass that Leads to Remote Code ExecutionEPSS 0.7%CVE-2026-77109HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.7%CVE-2026-34651HIGHAdobe Commerce | Uncontrolled Resource Consumption (CWE-400)EPSS 0.7%CVE-2026-76202HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.7%CVE-2026-21360MEDIUMAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 0.7%CVE-2026-34647HIGHAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.7%CVE-2023-29296MEDIUM[Cloud] Customer suspects IDOR vulnerabilityEPSS 0.6%CVE-2023-29295MEDIUMInsecure Direct Object Reference (IDOR) in Create Quote FunctionEPSS 0.6%CVE-2026-25524HIGHOpenMage LTS's Phar Deserialization leads to Remote Code ExecutionEPSS 0.6%CVE-2026-48411MEDIUMAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.6%CVE-2026-21289HIGHAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.6%CVE-2023-29290MEDIUMAdobe Commerce Guest Cart Shipping Address Overwrite IDOR EPSS 0.6%CVE-2026-34654MEDIUMAdobe Commerce | Dependency on Vulnerable Third-Party Component (CWE-1395)EPSS 0.6%CVE-2026-34653HIGHAdobe Commerce | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)EPSS 0.6%