Security & Compliance

Blocks order placement when a customer's billing or shipping address matches an admin-configured blocklist, with audit logging and rule-impact previews to stop repeat-offender fraud at the checkout boundary.

3 145 0 1.0.2 89d

Enhances Magento's default admin image CAPTCHA with optional per-character colors and grayscale noise for better backend readability, leaving the storefront CAPTCHA unchanged.

1 7 0 1.0.0 96d

Integrates the Captcha.eu service into Magento using a REST and public key pair to protect store forms with privacy-focused CAPTCHA challenges.

0 1,221 0 1.0.3 97d

Stores the checkout terms and conditions a customer accepted onto the order at placement and displays the agreement names and content in a Terms and Conditions section on the admin order view, retaining the content even if the agreement record is later removed.

0 1 0 1.0.0 103d

Extends Magento native reCAPTCHA to integrate Google reCAPTCHA Enterprise using the official Google Cloud PHP client, with admin configuration for the Cloud project ID and service-account credentials.

0 111 0 1.0.0 117d

Adds CLI commands to toggle all CAPTCHA and reCAPTCHA settings on or off, with an option to also disable or re-enable Magento's two-factor authentication module.

0 9 0 v1.0.1 124d

Connects Magento orders to the Subuno anti-fraud API, automatically reviewing purchases for fraud risk and returning results to Magento so merchants can flag risky orders before shipping.

2 95 1 1.0.3 126d

Security hardening package bundling defensive mitigations that block file-type custom option uploads via the Web API (PolyShell / APSB25-94) and patch the frontend SessionReaper vulnerability.

1 73 0 1.0.0 131d

Validates custom option values before processing to prevent unauthorized file type injections via the PolyShell vulnerability. Checks option existence and enforces strict type matching for file-type custom options.

3 1,690 1 1.0.1 135d

Automatically scans and removes malware files from the Magento media directory every 15 minutes, protecting the store from uploaded malicious files.

0 4 0 1.0.0 141d

Mitigates PolyShell-style file upload abuse by blocking file custom option uploads and restricting allowed extensions to images only. Includes a CLI command to scan and clear suspicious files from the custom_options media directory.

0 832 0 1.0.5 142d