Mitigates the CVE-2024-34102 (Cosmic Sting) XXE/RCE vulnerability as an installable extension, for stores that cannot upgrade Magento or apply the official patch.
Patches the CVE-2022-24086/24087 RCE vulnerabilities by performing deep template-variable escaping, for stores that cannot upgrade or apply the official patches.
Provides a framework to manipulate the Magento 2 GraphQL schema before it is used, letting developers remove or alter fields and endpoints added by other extensions.
Shows a product's special price directly on the admin product edit page, so staff can see it without opening the Advanced Pricing panel.
Analyzes the sentiment of product reviews using an external API and RabbitMQ. Displays the sentiment analysis results on the product detail page, next to each review.
Enhances Magento's template hints by displaying information for templates, blocks, containers, and UI components. Uses CSS outlines to avoid layout disruption.
Replaces Magento's Xml\Security class with a hardened version that correctly detects XML entities even when the input is not UTF-8 encoded under php-fpm, closing a potential XXE gap.
A simple module that allows you to switch locale in Magento 2 Admin Panel.
This module displays a popup to the customer indicating the number of seconds remaining until they are automatically logged out of the system.
Creates PHP Data Patch files for CMS content, product attributes, and store configuration directly from the Magento 2 admin panel. Exports patches as PHP files for easy integration into code repositories.
Allows us to create PHP Data Patch Files in Magento 2 Admin panel and export them to PHP files which we can add to our code repositories.