Magento

    Dashboard / Vendors

    Products: 5
    Vulnerabilities: 226
    Known Exploited: 0
    32
    Critical Level Threats
    71
    High Level Threats
    119
    Medium Level Threats
    4
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-60991

    A reflected cross-site scripted (XSS) vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload injected into the cat parameter.

    Last Modified: Apr 15, 2026
    Published: Oct 01, 2025

    CVE-2025-58669

    WordPress Magento 2 WordPress Integration plugin <= 1.4.2.1 - Cross Site Scripting (XSS) vulnerability

    Last Modified: Apr 23, 2026
    Published: Sep 22, 2025

    CVE-2021-36036

    Magento Commerce Media Gallery Upload Improper Access Control Could Lead To Remote Code Execution

    Last Modified: Feb 27, 2025
    Published: Sep 06, 2023

    CVE-2021-36021

    Magento Commerce CMS Page Improper Input Validation Could Lead To Remote Code Execution

    Last Modified: Nov 21, 2024
    Published: Sep 06, 2023

    CVE-2021-36023

    Magento Commerce Widgets Update Layout XML Injection Vulnerability Could Lead To Remote Code Execution

    Last Modified: Feb 27, 2025
    Published: Sep 06, 2023
    Items Per Page
    Magento Vulnerabilities & Security CVEs | CVE-DB