cbcvebase.

Amasty Order Attributes For Magento 2 vulnerabilities

1 known vulnerability affecting amasty/order_attributes_for_magento_2.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-53787P2CRITICALCVSS 9.8PoCfixed in 4.0.02026-06-12
CVE-2026-53787 [CRITICAL] CWE-434 CVE-2026-53787: Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary fil Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by submitting files of any type or name to the upload endpoint without authentication, session validation, or cart context. Attacker
nvd
Amasty Order Attributes For Magento 2 vulnerabilities | cvebase