Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Amasty Clear all filters
TI-2026-38783 CVE-2026-53787 · GHSA-mgg8-gq8g-gq88

Amasty Order Attributes for Magento 2 < 4.0.0 Unauthenticated Arbitrary File Upload

Priority MEDIUM 57

Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.05638 Published 2026-06-12 Fixed in 4.0.0 CWE-434
TI-2022-16760 CVE-2022-36433 · GHSA-2v58-v85m-32w9

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2…

Priority LOW 28

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_content and full_content fields, leading to XSS attacks against admin panel users v…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0062 Published 2022-11-29 No fix listed CWE-79