cbcvebase.

Mirasvit Full Page Cache Warmer For Magento 2 vulnerabilities

1 known vulnerability affecting mirasvit/full_page_cache_warmer_for_magento_2.

Total CVEs
1
CISA KEV
1
actively exploited
Public exploits
1
Exploited in wild
1
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2026-45247P1CRITICALCVSS 9.8KEVPoCfixed in 1.11.122026-05-26
CVE-2026-45247 [CRITICAL] CWE-502 CVE-2026-45247: Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection Mirasvit Full Page Cache Warmer for Magento 2 before version 1.11.12 contains a PHP object injection vulnerability that allows unauthenticated attackers to achieve remote code execution by supplying a crafted serialized PHP object in the CacheWarmer cookie. Attackers can exploit the unrestricted call to PHP's native unserialize() function combined
nvd
Mirasvit Full Page Cache Warmer For Magento 2 vulnerabilities | cvebase