Vulnerability in REST API allows attackers to upload executable files.

Unrestricted file upload: all #Magento #OpenSource and #AdobeCommerce versions up to 2.4.9-alpha2

#XSS: all versions pre-2.3.5 or custom webserver config

#RCE via #PHP upload: #nginx 2.0.0–2.2.x (via index.php filename), any non-stock version nginx passing all .php to fastcgi, #Apache pre-2.3.5 without php_flag engine 0

Patched: 2.4.9-alpha3+ (pre-release only)

https://www.bleepingcomputer.com/news/security/new-polyshell-flaw-allows-unauthenticated-rce-on-magento-e-stores/

https://sansec.io/research/magento-polyshell

#Magento2

New ‘PolyShell’ flaw allows unauthenticated RCE on Magento e-stores

A newly disclosed vulnerability dubbed 'PolyShell' affects all Magento Open Source and Adobe Commerce stable version 2 installations, allowing unauthenticated code execution and account takeover.

BleepingComputer
How to add new dependencies to classes

Adding new dependencies while keeping backward compatibility in Magento is not trivial. This article from 2018 shows the approaches and common mistakes.

BaDos Life

Never lose a sale again. Magento 2 Stock Notification by Webkul alerts customers when products are back in stock. A simple way to boost conversions.

#Magento2 #Webkul #eCommerce #Magento2StockNotification

Read more 👉🏼 https://store.webkul.com/magento2-out-of-stock-notification.html

Magento 2 Out of Stock Notification

Magento 2 out of stock plugin works as a product notifier extension. In online retail business, it's very much possible about the out of stock situation. A retailer may lose the customer because of the same, Here this plugin help and notify to the Custome

Webkul

Hire a skilled Magento 2 Developer from Webkul! Build custom, fast, and scalable online stores that boost sales and performance.

#Magento2 #Webkul #eCommerce #MagentoDeveloper

Read more 👉🏼 https://webkul.com/hire-magento-developers/

Hire Magento Developers | Certified Adobe Commerce Developers - Webkul

Hire Magento developers for your project now! Our expert handles custom storefronts, plugins, extensions, payment integration, and maintenance.

Webkul Software

Boost your eCommerce business with Webkul, a leading Magento 2 Agency. Faster sites, smooth checkout, and better conversions.

#Magento2 #Webkul #eCommerceGrowth #MagentoAgency

Read more 👉🏼 https://webkul.com/magento-development/

Magento Development Services Company | Magento 2 Agency

Hire Magento 2 development company for all kinds of Magento development services e.g. customization, API, apps, & theme integrations.

Webkul Software
Thinking of trying vvveb instead of Magento2 for my online shop, has anyone worked with vvveb or both? So maybe i can be eased in a bit more, but atleast the managment seems to look similar :3 (reason why one of them is high customizability, open sauce, E-Commerce focus, Official docker support though magento is kinda outdated on it and that they are both free to use :D)
#vvveb #magento2 #Ecommerce #webhosting

Want your store to stand out? Webkul's Magento 2 Custom Development delivers unique branded experiences and functions that off-the-shelf extensions can't match. Be unique. Be better.

#Magento2 #Magento2CustomDevelopment #CustomMagento #eCommerceDesign #M2 #MagentoEnterprise #APIIntegration

https://webkul.com/magento-development/

Magento Development Services Company | Magento 2 Agency

Hire Magento 2 development company for all kinds of Magento development services e.g. customization, API, apps, & theme integrations.

Webkul Software

Don’t let slow pages kill your vibe. Make every swipe smooth with Magento 2 Accelerated Mobile Pages Extension.

#Magento2 #AMP #MobileCommerce #eCommerce

https://store.webkul.com/magento2-amp-extension.html

Magento 2 AMP Extension

Magento 2 AMP ( Accelerated Mobile Pages For Magento 2 ) - extension create AMP pages for Magento 2 e-commerce website. The module is validated with Google search console and Chrome validator as well.

Webkul

Keep your Magento 2 store live while upgrading. Magento 2 Server Migration by Webkul ensures zero downtime and a secure transfer.

#Magento2 #Webkul #ServerMigration #Magento2ServerMigration

Read more 👉🏼 https://store.webkul.com/Magento2-Server-Migration.html

Magento 2 Server Migration

Migrate your Magento1.x store to your Magento 2.x store on AWS.

Webkul

Stay worry-free with Magento 2 Support Services! Get quick solutions, regular updates, and smooth store performance.

#Magento2 #eCommerce #TechSupport #Support #OnlineStore #eCommerce #WebDev

👉 https://webkul.com/magento-2-support-and-maintenance-services/

Magento 2 Support and Maintenance Services

Get Magento support and maintenance services from Webkul! Our team of certified Magento experts will ensure your store is always up-to-date, optimized, and secure.

Webkul Software