Search for packages
| purl | pkg:composer/magento/community-edition@2.4.5-p7 |
| Next non-vulnerable version | 2.4.6-p9 |
| Latest non-vulnerable version | 2.4.9-alpha3 |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-r355-75hw-r8jf
Aliases: CVE-2025-54265 |
Magento allows incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization … |
Vulnerable |
|
GHSA-qvwr-p3hj-j6jf
Aliases: CVE-2025-54267 |
Magento vulnerable to privilege escalation due to incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … |
Vulnerable |
|
GHSA-2768-5wmv-cfff
Aliases: CVE-2025-54264 |
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … |
Vulnerable |
|
GHSA-pcrx-r49h-x2w5
Aliases: CVE-2025-54266 |
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … |
Vulnerable |
|
GHSA-69x9-xp2j-w8g8
Aliases: CVE-2025-54263 |
Magento provides incorrect authorization through a security feature bypass Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … |
Vulnerable |
|
GHSA-cj7w-pm77-hvg6
Aliases: CVE-2022-34253 |
Magento XML Injection vulnerability in the Widgets Module Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and … |
Vulnerable |
|
GHSA-r7mm-grf3-5fjv
Aliases: CVE-2022-34256 |
Magento Improper Authorization vulnerability Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected by … |
Vulnerable |
|
GHSA-x95x-f4g9-mm85
Aliases: CVE-2022-34255 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected … |
Vulnerable |
|
GHSA-5m55-g8pv-x8ww
Aliases: CVE-2022-34258 |
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are … |
Vulnerable |
|
GHSA-9wjf-94h3-r4rh
Aliases: CVE-2022-34259 |
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are affected … |
Vulnerable |
|
GHSA-rg7p-wmgj-f374
Aliases: CVE-2022-34257 |
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.3-p2 (and earlier), 2.3.7-p3 (and earlier) and 2.4.4 (and earlier) are … |
Vulnerable |
|
GHSA-jmqp-r3gg-6jh3
Aliases: CVE-2024-34111 |
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by … |
Vulnerable |
|
GHSA-wwj3-573j-rvvm
Aliases: CVE-2024-34104 |
Magento Open Source Improper Authorization vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-r7cm-g469-wm4g
Aliases: CVE-2024-34107 |
Magento Open Source Improper Access Control vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an … |
Vulnerable |
|
GHSA-m8cj-3v68-3cxj
Aliases: CVE-2024-34102 |
Magento Open Source affected by an Improper Restriction of XML External Entity Reference ('XXE') vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, … |
Vulnerable |
|
GHSA-p6h9-gx5g-wg64
Aliases: CVE-2024-34106 |
Magento Open Source Incorrect Authorization vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Incorrect … |
Vulnerable |
|
GHSA-5632-wq7m-gfq9
Aliases: CVE-2024-34105 |
Magento Open Source Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by a … |
Vulnerable |
|
GHSA-f7q4-9gwv-6774
Aliases: CVE-2024-34103 |
Magento Open Source Improper Authentication vulnerability Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-52fg-wjxm-pp44
Aliases: CVE-2024-39400 |
Magento DOM-based Cross-Site Scripting (XSS) vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a DOM-based Cross-Site … |
Vulnerable |
|
GHSA-74w7-cr4v-wf2v
Aliases: CVE-2024-39419 |
Magento Improper Access Control Leads to Privilege escalation Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by … |
Vulnerable |
|
GHSA-7r99-8wqp-h7pc
Aliases: CVE-2024-39399 |
Magento Path Traversal vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Limitation of a … |
Vulnerable |
|
GHSA-6pxh-2557-5cj5
Aliases: CVE-2024-39406 |
Magento Open Source Path Traversal vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-5g9f-7gqc-8hj4
Aliases: CVE-2024-39405 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
|
GHSA-8frp-pxq2-3gpq
Aliases: CVE-2024-39401 |
Magento OS Command ('OS Command Injection') vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-4xmj-f664-hv98
Aliases: CVE-2024-39417 |
Magento Improper Authorization leads to Security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-rf4q-m23c-7q8r
Aliases: CVE-2024-39409 |
Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected … |
Vulnerable |
|
GHSA-cjm6-8mw8-2f8c
Aliases: CVE-2024-39407 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
|
GHSA-qm77-mqf3-fmhq
Aliases: CVE-2024-39411 |
Magento Improper Authorization leads to security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-8w5f-8992-g86j
Aliases: CVE-2024-39413 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
|
GHSA-mmp7-8cg4-9wrg
Aliases: CVE-2024-39403 |
Magento Stored Cross-Site Scripting (XSS) vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by a stored Cross-Site … |
Vulnerable |
|
GHSA-gj93-84g5-mcjq
Aliases: CVE-2024-39415 |
Magento Improper Authorization Leading to Security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-4cj6-f32v-6hgx
Aliases: CVE-2024-39408 |
Magento Open Source Cross-Site Request Forgery vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by … |
Vulnerable |
|
GHSA-2ff6-837j-hg5x
Aliases: CVE-2024-39402 |
Magento OS Command ('OS Command Injection') vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-q628-54wg-4r5q
Aliases: CVE-2024-39398 |
Magento does not properly restrict excessive authentication attempts Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-4xgg-rw35-7mv5
Aliases: CVE-2024-39416 |
Magento Improper Authorization leads to Security feature bypass Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-4323-f82v-f6jr
Aliases: CVE-2024-39410 |
Magento Open Source Cross-Site Request Forgery (CSRF) vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected … |
Vulnerable |
|
GHSA-7472-vw39-g2j3
Aliases: CVE-2024-39412 |
Magento Open Source Improper Authorization vulnerability Magento Open Source versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-gvgf-pvh5-vjh4
Aliases: CVE-2024-39418 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
|
GHSA-x6f9-hv9r-fgq4
Aliases: CVE-2024-39414 |
Magento Improper Access Control Leads to Privilege escalation Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an … |
Vulnerable |
|
GHSA-qrh3-vxjg-h9h6
Aliases: CVE-2024-39404 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier are affected by an Improper Authorization vulnerability that … |
Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2024-20758
|
Magento Open Source allows Improper Input Validation Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an … |
GHSA-wh4m-6rh3-p4rq
|
|
CVE-2024-20759
|
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a … |
GHSA-59vf-hjxc-f9c5
|
|
GHSA-wh4m-6rh3-p4rq
|
Magento Open Source allows Improper Input Validation Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an … |
CVE-2024-20758
|
|
GHSA-59vf-hjxc-f9c5
|
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a … |
CVE-2024-20759
|