Security & Compliance

Adds an EU consumer right-of-withdrawal compliance flow to Magento 2 storefronts, letting guests and customers submit Article 11a withdrawal requests through a guided form. Sends durable-medium receipt emails, ships Annex I text in 22 EU locales, and provides an admin grid with status workflow and CSV export.

17 4,456 0 1.1.2 1d

Defense-in-depth protection against the PolyShell unrestricted file upload vulnerability (APSB25-94) affecting Adobe Commerce and Magento Open Source up to 2.4.9-alpha2, hardening image content validation and processing with polyglot file scanning and a strict extension allowlist. Supersedes the original markshust patch.

62 104,748 5 1.3.5 8d

Surfaces rarely used admin accounts sorted by last login and lets you bulk enable, disable, or delete them, lowering the risk of compromise from stale accounts.

9 2,626 0 1.1.0 8d

Logs admin actions, login attempts, and page visits for audit trails. Tracks field-level changes and allows reverting data for supported entities.

29 13,784 0 2.0.2 8d

Signature-based malware scanner and file integrity monitor that recursively scans the Magento codebase for webshells, backdoors, cryptominers, and injection payloads, with quarantine support, an admin dashboard, scheduled scans, and email alerts.

6 71 0 1.1.4 15d

Implements the EU right of withdrawal via button click as required by EU Directive 2023/2673, adding a clearly visible withdrawal button to the customer account area for easy contract cancellation starting June 2026.

24 11,246 11 v1.9.3 19d

Provides a dashboard to view Composer packages, their status, and security advisories. Sends email reminders about package upgrades and security issues.

15 3,200 0 0.7.0 19d

Provides PHP methods to determine a customer's country based on their IP address. Enables features like automatic currency and language switching.

55 262,520 0 2.3.6 30d

Helps Magento 2 stores comply with GDPR by allowing customers to delete accounts and addresses. The Pro version adds billing document management and cookie restrictions.

52 347,602 1 4.2.9 30d

Displays Magento Quality Patch status in an admin grid, eliminating the need for CLI access. Notifies users of available updates for relevant patch packages.

15 23,753 0 1.5.0 37d

Manages Content Security Policy rules via Magento CLI, storing them in env.php for environment-specific control without database access. Includes automatic CSP header splitting to avoid size limits on servers.

0 304 0 2.0.0 41d