Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Mageplaza Clear all filters
TI-2026-55073 CVE-2026-79324 · GHSA-45ww-vjr4-j928

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2…

Priority MEDIUM 40

Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote unauthenticated attackers to delete any customer's saved address, and to erase al…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00564 Published 2026-09-09 No fix listed CWE-639
TI-2026-55071 CVE-2026-79322 · GHSA-fwhc-5w96-hjf3

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2…

Priority LOW 38

SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote unauthenticated attackers to execute arbitrary SQL commands and read arbitrary da…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00475 Published 2026-09-09 No fix listed CWE-89