Follows SemVer in Security & Compliance

Helps Magento 2 stores comply with GDPR by allowing customers to delete accounts and addresses. The Pro version adds billing document management and cookie restrictions.

52 349,118 1 4.3.0 1d

Provides PHP methods to determine a customer's country based on their IP address. Enables features like automatic currency and language switching.

55 265,332 0 2.4.0 2d

Signature-based malware scanner and file integrity monitor that recursively scans the Magento codebase for webshells, backdoors, cryptominers, and injection payloads, with quarantine support, an admin dashboard, scheduled scans, and email alerts.

6 81 0 1.1.6 9d

Implements the EU right of withdrawal via button click as required by EU Directive 2023/2673, adding a clearly visible withdrawal button to the customer account area for easy contract cancellation starting June 2026.

24 12,350 10 v1.9.4 11d

Defense-in-depth protection against the PolyShell unrestricted file upload vulnerability (APSB25-94) affecting Adobe Commerce and Magento Open Source up to 2.4.9-alpha2, hardening image content validation and processing with polyglot file scanning and a strict extension allowlist. Supersedes the original markshust patch.

62 116,543 5 1.3.5 18d

Logs admin actions, login attempts, and page visits for audit trails. Tracks field-level changes and allows reverting data for supported entities.

29 16,388 0 2.0.2 19d

Provides a dashboard to view Composer packages, their status, and security advisories. Sends email reminders about package upgrades and security issues.

15 3,506 0 0.7.0 30d

Displays Magento Quality Patch status in an admin grid, eliminating the need for CLI access. Notifies users of available updates for relevant patch packages.

15 23,912 0 1.5.0 48d

Manages Content Security Policy rules via Magento CLI, storing them in env.php for environment-specific control without database access. Includes automatic CSP header splitting to avoid size limits on servers.

0 317 0 2.0.0 51d

Read-only Magento 2 security scanner that runs whitebox checks — version/patch status, MAGE_MODE, admin URL, 2FA coverage, env.php permissions, Composer advisories, core file integrity, and more — and emits a structured JSON report with severities and remediation links.

0 86 0 v1.6.2 65d

Friendly Captcha integration for Magento2

19 138,903 10 4.3.0 67d

Allows administrators to change customer passwords directly from the customer edit page in the admin panel. Includes a command-line interface for password updates.

46 247,366 0 v1.1.2 67d