CVE security advisories and vulnerability history for magento/community-edition by magento.
354
Total CVEs
Published
3
In CISA KEV
Exploited in the wild
3
Public exploits
PoC or exploit code
6.6
Avg CVSS
2017–2025
Last updated
Overview
magento magento/community-edition has 354 published CVE records since 2017, of which 3 are in CISA's Known Exploited Vulnerabilities catalog and 3 have a known public exploit. The average CVSS base score across scored CVEs is 6.6.
This page aggregates every publicly disclosed vulnerability (CVE) affecting magento magento/community-edition, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of magento magento/community-edition's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical49
High97
Medium191
Low17
In CISA’s Known Exploited Vulnerabilities catalog
3
3 of magento magento/community-edition's CVEs are confirmed exploited in the wild.
Public exploits
3
3 of magento magento/community-edition's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every magento magento/community-edition version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
2.4.5 <= v <= 2.4.5123 CVEs
2.4.6 <= v <= 2.4.6122 CVEs
2.4.4 <= v <= 2.4.4112 CVEs
2.4.7 <= v <= 2.4.797 CVEs
2.1.0 <= v < 2.1.1851 CVEs
2.2.0 <= v < 2.2.951 CVEs
2.3.0 <= v < 2.3.251 CVEs
2.2.0 <= v < 2.2.1038 CVEs
2.3.7 <= v <= 2.3.727 CVEs
2.4.2 <= v <= 2.4.226 CVEs
< 2.3.7-p125 CVEs
Common weakness types
The CWE weakness categories most often found in magento magento/community-edition CVEs. Follow any weakness for its full explanation.
Common questions about magento magento/community-edition vulnerabilities.
How many CVEs does magento magento/community-edition have?
magento magento/community-edition has 354 published CVE records since 2017.
How many magento magento/community-edition CVEs are in CISA KEV?
Yes — 3 of magento magento/community-edition's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for magento magento/community-edition vulnerabilities?
Yes — 3 of magento magento/community-edition's CVEs have a known public exploit.
Which versions of magento magento/community-edition are affected?
215 distinct magento magento/community-edition versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in magento magento/community-edition CVEs?
magento magento/community-edition's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-863 (Incorrect Authorization), CWE-284 (Improper Access Control), CWE-285 (Improper Authorization).
How many critical magento magento/community-edition vulnerabilities are there?
magento magento/community-edition has 49 critical and 97 high-severity CVEs.
What is the average severity of magento magento/community-edition CVEs?
The average CVSS base score across magento magento/community-edition's scored CVEs is 6.6.
