Exposure of Magento

CMS, Ecommerce

312

exposure score

34,078

sites use

2

exploited

28

critical

CVEs

285 results

CVE-2025-27400LOWMagento vulnerable to stored XSS in theme config fieldsEPSS 0.2%CVE-2025-58669MEDIUMWordPress Magento 2 WordPress Integration plugin <= 1.4.2.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64174MEDIUMOpenMage is vulnerable to XSS in Admin NotificationsEPSS 0.2%CVE-2026-40098MEDIUMOpenMage LTS imports cross-user wishlist item via shared wishlist code, leading to private option disclosure and file-disclosure variantEPSS 0.2%CVE-2026-42207MEDIUMMagento LTS: Open Redirect via Unvalidated `uenc` Parameter in `stockAction()` - magento-ltsEPSS 0.1%

← previouspage 15 / 15next →

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →