Description
Check Point researchers discovered a critical RCE (remote code execution) vulnerability in the Magento web e-commerce platform that can lead to the complete compromise of any Magento-based store, including credit card information as well as other financial and personal data.
Remediation
A patch to address the flaws was released on February 9, 2015 (SUPEE-5344). Install this patch or upgrade to the latest version of Magento.
References
Related Vulnerabilities
WordPress Plugin XCloner-Backup and Restore Multiple Vulnerabilities (3.1.2)
WordPress Plugin WordPress Landing Pages Remote Code Execution (1.9.0)
WordPress Plugin File Gallery Remote Code Execution (1.7.9)
PHP preg_replace used on user input
WordPress Plugin WP-Stateless-Google Cloud Storage Remote Code Execution (2.2.0)