MageVulnDB
A database of Magento 1 and 2 extensions with known security vulnerabilities, enabling automated detection of insecure third-party modules.
What is MageVulnDB?
MageVulnDB is a database listing Magento 1 and 2 third-party extensions with known security vulnerabilities. It helps merchants and developers identify insecure modules in their Magento installations to prevent exploits like Magecart skimming attacks. The project provides both human-readable CSV lists and integration with n98-magerun for automated scanning.
Magento store owners, developers, and agencies responsible for maintaining secure Magento 1 or Magento 2 e-commerce sites.
It fills a critical gap by offering a centralized, programmatically accessible source of extension vulnerability data, unlike general security advisories. The integration with n98-magerun allows for easy, ongoing security checks without requiring Composer or disrupting existing workflows.
Overview
List of Magento extensions with known security issues.
Use Cases
Best For
- Scanning Magento installations for known vulnerable third-party extensions
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
