Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

magento magento vulnerabilities and exploits

(subscribe to this query)
4.2
CVSSv3

CVE-2021-28583

Magento versions 2.4.2 (and previous versions), 2.4.1-p1 (and previous versions) and 2.3.6-p1 (and previous versions) are affected by a Violation of Secure Design Principles vulnerability in RMA PDF filename formats. Successful exploitation could allow an malicious user to get un...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.1Magento Magento 2.4.2
7.2
CVSSv3

CVE-2021-28584

Magento versions 2.4.2 (and previous versions), 2.4.1-p1 (and previous versions) and 2.3.6-p1 (and previous versions) are affected by a Path Traversal vulnerability when creating a store with child theme.Successful exploitation could lead to arbitrary file system write by an auth...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.1Magento Magento 2.4.2
9.1
CVSSv3

CVE-2021-21014

Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin ...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.0Magento Magento 2.4.1
9.1
CVSSv3

CVE-2021-21016

Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to OS command injection via the WebAPI. Successful exploitation could lead to remote code execution by an authenticated attacker. Access to the admin ...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.0Magento Magento 2.4.1
9.1
CVSSv3

CVE-2021-21018

Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to OS command injection via the scheduled operation module. Successful exploitation could lead to arbitrary code execution by an authenticated attacke...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.0Magento Magento 2.4.1
5.3
CVSSv3

CVE-2021-21020

Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to an access control bypass vulnerability in the Login as Customer module. Successful exploitation could lead to unauthorized access to restricted res...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.0Magento Magento 2.4.1
4.8
CVSSv3

CVE-2021-21023

Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to a stored cross-site scripting vulnerability in the admin console. Successful exploitation could lead to arbitrary JavaScript execution in the victi...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.0Magento Magento 2.4.1
9.1
CVSSv3

CVE-2021-21024

Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are affected by a blind SQL injection vulnerability in the Search module. Successful exploitation could lead to unauthorized access to restricted resources by an una...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.0Magento Magento 2.4.1
9.1
CVSSv3

CVE-2021-21025

Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are vulnerable to XML injection in the product layout updates. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.0Magento Magento 2.4.1
5.3
CVSSv3

CVE-2021-21026

Magento versions 2.4.1 (and previous versions), 2.4.0-p1 (and previous versions) and 2.3.6 (and previous versions) are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources...
Adobe Magento CommerceMagento MagentoMagento Magento 2.3.6Magento Magento 2.4.0Magento Magento 2.4.1
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
jasmin ransomwareCVE-2025-6110code executionCVE-2025-21420reflected XSSCVE-2025-5336wp url shortenerCVE-2025-49113gr-5400axoverflowCVE-2025-6062letta-aiCVE-2025-50143
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook