Security & Compliance

Mitigates PolyShell-style file upload abuse by blocking file custom option uploads and restricting allowed extensions to images only. Includes a CLI command to scan and clear suspicious files from the custom_options media directory.

0 1,043 0 1.0.6 3d

Hyva theme companion for mageme/module-eu-withdrawal. Re-renders the storefront-facing withdrawal flow with the Hyva design system. Install it when your storefront runs on a Hyva theme.

2 7,404 1 1.0.12 4d

Signature-based malware scanner and file integrity monitor that recursively scans the Magento codebase for webshells, backdoors, cryptominers, and injection payloads, with quarantine support, an admin dashboard, scheduled scans, and email alerts.

6 138 0 1.3.7 11d

Blocks order placement when a customer's billing or shipping address matches an admin-configured blocklist, with audit logging and rule-impact previews to stop repeat-offender fraud at the checkout boundary.

4 364 0 1.0.3 17d

Adds an EU consumer right-of-withdrawal compliance flow to Magento 2 storefronts, letting guests and customers submit Article 11a withdrawal requests through a guided form. Sends durable-medium receipt emails, ships Annex I text in 22 EU locales, and provides an admin grid with status workflow and CSV export.

20 11,541 1 1.1.6 37d

Implements the EU right of withdrawal via button click as required by EU Directive 2023/2673, adding a clearly visible withdrawal button to the customer account area for easy contract cancellation starting June 2026.

30 21,647 6 v1.9.6 38d

Provides PHP methods to determine a customer's country based on their IP address. Enables features like automatic currency and language switching.

55 279,584 0 2.4.1 51d

Helps Magento 2 stores comply with GDPR by allowing customers to delete accounts and addresses. The Pro version adds billing document management and cookie restrictions.

52 355,888 1 4.3.0 56d

Defense-in-depth protection against the PolyShell unrestricted file upload vulnerability (APSB25-94) affecting Adobe Commerce and Magento Open Source up to 2.4.9-alpha2, hardening image content validation and processing with polyglot file scanning and a strict extension allowlist. Supersedes the original markshust patch.

64 200,806 3 1.3.5 73d

Surfaces rarely used admin accounts sorted by last login and lets you bulk enable, disable, or delete them, lowering the risk of compromise from stale accounts.

9 2,629 0 1.1.0 73d

Logs admin actions, login attempts, and page visits for audit trails. Tracks field-level changes and allows reverting data for supported entities.

29 41,880 0 2.0.2 73d