Read the docs

Amasty

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Amasty records in CISA KEV

No Amasty vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Blog Pro 3 records MEDIUM Amasty Blog Pro 1 record LOW

Records

5 records

TI-2026-38783 CVE-2026-53787 · GHSA-mgg8-gq8g-gq88

Amasty Order Attributes for Magento 2 < 4.0.0 Unauthenticated Arbitrary File Upload

Priority MEDIUM 57

Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.05638 Published 2026-06-12 Fixed in 4.0.0 CWE-434
TI-2022-16760 CVE-2022-36433 · GHSA-2v58-v85m-32w9

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2…

Priority LOW 28

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_content and full_content fields, leading to XSS attacks against admin panel users v…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0062 Published 2022-11-29 No fix listed CWE-79
Open these records in search →