Tag
E-Commerce
-
PHP: two critical vulnerabilities, updates since 21 October 2026
On 21 October 2026 PHP fixed two critical vulnerabilities (CVE-2026-109618, CVE-2026-109619). Which versions contain the fixes and what Magento shops should do now.
-
PolyShell: file upload vulnerability in Magento 2 under mass exploitation
PolyShell lets attackers upload files to Magento shops without logging in. What is affected, how to check your shop and which updates fix the vulnerability.
-
The Red Hat incident: what it means for Magento shops
In 2025 attackers compromised a GitLab instance used by Red Hat Consulting. What is confirmed, what is not, and which precautions make sense for Magento shops.
-
Magento development and support for small and medium-sized businesses
Development, updates and support for Magento 1 and 2, for shop owners and for agencies that want to outsource work. What it includes and how we work together.
-
SessionReaper (CVE-2025-54236): critical vulnerability in Magento 2
SessionReaper is a critical vulnerability in the REST API of Magento 2 and Adobe Commerce. What it allows, which patch fixes it and what to check if you patched late.
-
The programmer as architect: how I use AI in development
I use AI tools to develop faster and keep prices down. What I use them for, what I do not, and how I make sure the result is secure and stable.
-
Magento security update June 2025: CVE-2025-47110 and APSB25-50
In June 2025 Adobe fixed several vulnerabilities in Magento 2 with APSB25-50, including CVE-2025-47110. Affected versions, updates and what the vulnerability requires.
-
Keep running Magento 1 securely, with Mage-One
Adobe ended support for Magento 1 in 2020. Together with Mage-One, I keep Magento 1 shops running with security patches and current PHP versions.
-
Magento hosting for small and medium-sized shops
Magento needs more than standard web hosting. What a Magento server should provide and what my managed hosting includes.
-
Magento 2.4.6-p7 and 2.4.7-p2: the August 2024 security update
With APSB24-61 Adobe fixed several critical vulnerabilities in Magento 2 in August 2024. Affected versions, the matching updates and an isolated patch for Apache servers.
-
Magento 2.4.6-p6 and 2.4.7-p1: the June 2024 security updates
Magento 2.4.6-p6 and 2.4.7-p1 fix CosmicSting among other issues. What is in these patch releases, which one applies to you and how to apply it safely.
-
CosmicSting (CVE-2024-34102): critical vulnerability in Magento 2
CosmicSting is a critical XXE vulnerability in Magento 2 and Adobe Commerce. Which versions are affected, which updates fix it and what to do after updating.