Mitigates the PolyShell unrestricted file upload vulnerability in the Magento REST API by enforcing an image-only extension allowlist on custom option file uploads. Blocks executable file uploads at both the validator and uploader level.
Automatically scans and removes malware files from the Magento media directory every 15 minutes, protecting the store from uploaded malicious files.
Integrates Lucide Icons into Hyva themes. Allows usage of SVG icons in CMS content, pages, blocks and widgets.
Validates custom option values before processing to prevent unauthorized file type injections via the PolyShell vulnerability. Checks option existence and enforces strict type matching for file-type custom options.
Creates landing pages based on category and filter attributes. Allows custom URLs and SEO-friendly content for these pages, which are also added to the sitemap.
Integrates Tweakwise search and navigation into Magento 2. Enables filtering based on variant data and configures layered navigation using Tweakwise results.
Integrates the Unzer payment gateway with Magento 2. Enables acceptance of various payment methods, including cards, bank transfers, and wallets.
Sends Magento 2 Monolog records to a Buggregator debugging server endpoint, enabling centralized log viewing and analysis outside of the Magento file system.
A Magento 2 extension that replaces Luma's js stack with its own implementation.
Implements lazy loading of images, loading them only when visible to the user. Reduces page size and the number of HTTP requests.
Adds a debug toolbar to Magento 2, displaying request/response data, SQL queries, profiler information, layout details, and cached items. Helps developers debug by providing insights into application execution.
Adds address autocompletion to checkout using the Postcode.eu API. Supports multiple countries and retrieves address data based on postal codes.