438 CVEs
3 in CISA KEV
Magento Vulnerabilities
CVE security advisories and vulnerability history for Magento.
438
Total CVEs
Published
3
In CISA KEV
Exploited in the wild
8
Public exploits
PoC or exploit code
6.7
Avg CVSS
2015–2026
Overview
Magento has 438 published CVE records since 2015, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 6.7.
This page aggregates every publicly disclosed vulnerability (CVE) affecting Magento products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.