Security & Compliance

Adds Subresource Integrity (SRI) hash enforcement to Content Security Policy headers, ensuring that external scripts and stylesheets have not been tampered with before execution.

1 37 0 1.0.0 162d

Integrates Utanvet Ellenor risk assessment into Magento 2 checkout, filtering available payment methods based on risk scores and sending order outcome signals on status transitions.

0 2 0 1.0.0 174d

Detects a visitor's country using GeoIP data. Provides a REST API and PHP interface to retrieve the country code, with fallback options.

5 39,127 0 1.1.2 182d

Integrates Umami, a privacy-focused open-source web analytics service, with your storefront for cookie-free visitor tracking.

0 3 0 2026.1 192d

Blocks customer registration with disposable and temporary email addresses by validating against a database of 90,000+ known throwaway domains. Supports custom blocklists and whitelists for fine-grained control.

0 2 0 1.0.0 193d

Tracks admin actions — add, edit, delete, view, mass updates, and failed logins — recording user, IP, and changed fields, with the ability to revert modifications. Maintained fork of the archived KiwiCommerce module.

0 216 0 1.1.7 198d

Intercepts the customer address file upload endpoint and returns a 403 Forbidden response, effectively disabling address file uploads for security hardening.

0 15 0 1.0.1 200d

Allows administrators to disable two-factor authentication for specific admin users. Provides both admin panel and command-line options for managing user 2FA status.

1 125 1 1.0.0 227d

Detects and blocks suspicious IP addresses based on failed login attempts. Sends warning emails to store owners about potential security threats.

46 96,147 1 4.1.0 230d

Enforces stronger admin password rules (forbidden words, upper/lowercase and special-character requirements) and automatically deactivates admin users who have not logged in for 90 days.

0 871 0 1.0.7 252d

Patches the CVE-2025-54236 (Session Reaper) account-takeover/RCE vulnerability as a universal Magento 2.3/2.4 extension, without using preferences so the store stays upgradable.

3 559 0 1.0.1 276d

Prevents Magento orders from being placed based on configurable rules, with pluggable matchers for blocking by IP, email, or geolocation.

4 1,594 1 2.2.7 294d