Search for packages
| purl | pkg:composer/magento/community-edition@2.4.7-p4 |
| Next non-vulnerable version | 2.4.9-alpha3 |
| Latest non-vulnerable version | 2.4.9-alpha3 |
| Risk score | 10.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-r355-75hw-r8jf
Aliases: CVE-2025-54265 |
Magento allows incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authorization … |
Vulnerable |
|
GHSA-qvwr-p3hj-j6jf
Aliases: CVE-2025-54267 |
Magento vulnerable to privilege escalation due to incorrect authorization Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … |
Vulnerable |
|
GHSA-2768-5wmv-cfff
Aliases: CVE-2025-54264 |
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … |
Vulnerable |
|
GHSA-pcrx-r49h-x2w5
Aliases: CVE-2025-54266 |
Magento vulnerable to stored Cross-Site Scripting (XSS) Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by … |
Vulnerable |
|
GHSA-69x9-xp2j-w8g8
Aliases: CVE-2025-54263 |
Magento provides incorrect authorization through a security feature bypass Magento versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are … |
Vulnerable |
|
GHSA-rr2g-rrjj-xw86
Aliases: CVE-2025-27188 |
Magento Improper Authorization vulnerability Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Improper Authorization vulnerability … |
Vulnerable |
|
GHSA-6wq7-cg9h-mj6q
Aliases: CVE-2025-27190 |
Magento Improper Access Control leads to Security feature bypass Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected … |
Vulnerable |
|
GHSA-2r94-wm5v-4prx
Aliases: CVE-2025-27192 |
Magento does not properly protect credentials Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected by an Insufficiently … |
Vulnerable |
|
GHSA-vhcq-4xrm-2cr2
Aliases: CVE-2025-27191 |
Magento Improper Access Control leads to Security feature bypass Magento versions 2.4.7-p4, 2.4.6-p9, 2.4.5-p11, 2.4.4-p12, 2.4.8-beta2 and earlier are affected … |
Vulnerable |
|
GHSA-g2pj-xmxq-3r9q
Aliases: CVE-2025-27206 |
Magento Improper Access Control leads to security feature bypass Adobe Commerce versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are … |
Vulnerable |
|
GHSA-85jx-x9r4-45m2
Aliases: CVE-2025-49549 |
Magento Authenticated Security feature bypass Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization … |
Vulnerable |
|
GHSA-r487-9vv5-75gg
Aliases: CVE-2025-43585 |
Magento Improper Authorization leading to security feature bypass Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by … |
Vulnerable |
|
GHSA-j934-vjh5-vf9r
Aliases: CVE-2025-47110 |
Magneto contains stored XSS vulnerability Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by a stored Cross-Site … |
Vulnerable |
|
GHSA-8hcx-xvww-6c6h
Aliases: CVE-2025-49550 |
Magento Security feature bypass Magento versions 2.4.8, 2.4.7-p5, 2.4.6-p10, 2.4.5-p12, 2.4.4-p13 and earlier are affected by an Incorrect Authorization vulnerability … |
Vulnerable |
|
GHSA-8mq8-c243-2335
Aliases: CVE-2025-49557 |
Magento Cross-site Scripting vulnerability Adobe Commerce versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a stored … |
Vulnerable |
|
GHSA-5777-jj7p-mpqw
Aliases: CVE-2025-49555 |
Magento Cross-Site Request Forgery (CSRF) vulnerability Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by a … |
Vulnerable |
|
GHSA-wcmw-8xpp-rwfj
Aliases: CVE-2025-49558 |
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by … |
Vulnerable |
|
GHSA-h4f4-gv6h-x824
Aliases: CVE-2025-49559 |
Magento vulnerable to path traversal Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an Improper … |
Vulnerable |
|
GHSA-7hrj-3c9x-xv5h
Aliases: CVE-2025-49556 |
Magento has incorrect authorization issue that leads to arbitrary file system read Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 … |
Vulnerable |
|
GHSA-xgfm-992v-h2hr
Aliases: CVE-2025-49554 |
Magento vulnerable to denial of service Magento versions 2.4.9-alpha1, 2.4.8-p1, 2.4.7-p6, 2.4.6-p11, 2.4.5-p13, 2.4.4-p14 and earlier are affected by an … |
Vulnerable |
|
GHSA-wh92-6q6g-px7j
Aliases: CVE-2025-54236 |
Magento Community Edition Improper Input Validation vulnerability Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected … | There are no reported fixed by versions. |
|
CVE-2024-20758
Aliases: GHSA-wh4m-6rh3-p4rq |
Magento Open Source allows Improper Input Validation Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by an … |
Vulnerable Vulnerable Vulnerable Vulnerable |
|
CVE-2024-20759
Aliases: GHSA-59vf-hjxc-f9c5 |
Magento Open Source allows Cross-Site Scripting (XSS) Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a … |
Vulnerable Vulnerable Vulnerable Vulnerable |
| Advisory | Summary | Aliases |
|---|---|---|
|
GHSA-6ff8-jrfg-43hh
|
Magento Business Logic Error vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a Business … |
CVE-2025-24425
|
|
GHSA-rjjw-g6hw-7pc9
|
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
CVE-2025-24416
|
|
GHSA-v6r2-425c-hfrr
|
Magento Incorrect Authorization vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Incorrect Authorization … |
CVE-2025-24421
|
|
GHSA-g3j6-9753-8mp2
|
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
CVE-2025-24417
|
|
GHSA-xwgx-8v72-4j5j
|
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
CVE-2025-24413
|
|
GHSA-3cfg-w257-cgf8
|
Magento Information Exposure vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Information Exposure … |
CVE-2025-24408
|
|
GHSA-gjxp-46rq-wg4q
|
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
CVE-2025-24410
|
|
GHSA-469f-wf4f-3jjv
|
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
CVE-2025-24437
|
|
GHSA-vw47-79jv-3598
|
Adobe Commerce Improper Authorization vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
CVE-2025-24409
|
|
GHSA-gc27-rvvm-q77r
|
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
CVE-2025-24415
|
|
GHSA-82p4-55gj-956p
|
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
CVE-2025-24435
|
|
GHSA-8884-7rm9-mrx4
|
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
CVE-2025-24438
|
|
GHSA-7jmr-43qj-pw47
|
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by … |
CVE-2025-24432
|
|
GHSA-mm87-rrqx-94cr
|
Magento stored Cross-Site Scripting (XSS) vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
CVE-2025-24428
|
|
GHSA-v3hq-g424-5mgg
|
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
CVE-2025-24427
|
|
GHSA-539v-w87w-w62c
|
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
CVE-2025-24424
|
|
GHSA-954p-ff72-327w
|
Adobe Commerce Path Traversal Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper Limitation … |
CVE-2025-24406
|
|
GHSA-36hw-x3cc-m258
|
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
CVE-2025-24411
|
|
GHSA-656q-fx2w-8ccv
|
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
CVE-2025-24429
|
|
GHSA-6w27-c66f-gvhq
|
Magento Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by … |
CVE-2025-24430
|
|
GHSA-fppq-f2m6-xv5c
|
Improper Authorization vulnerability in Magento and Adobe Commerce Adobe Commerce versions 2.4.8-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected … |
CVE-2025-24434
|
|
GHSA-fhw6-3mj5-w9gv
|
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
CVE-2025-24414
|
|
GHSA-m4rg-mpp2-97px
|
Magento Stored Cross-Site Scripting (XSS) Vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by a … |
CVE-2025-24412
|
|
GHSA-ghpr-6qhr-rpp8
|
Magento Improper Access Control vulnerability Adobe Commerce versions 2.4.7-beta1, 2.4.7-p3, 2.4.6-p8, 2.4.5-p10, 2.4.4-p11 and earlier are affected by an Improper … |
CVE-2025-24436
|