Magneto Ecommerce Websites Major Vulnerability

Magento Ecommerce Websites Require Immediate Update

Magneto Ecommerce Websites Have Major Vulnerability

Check Point, the cyber security company who discovered and posted a video on its blog. Their engineers setup an ecommerce demonstration that showed how the Magneto flaw could be used to reduce the price of a US$100,000 watch so that shoppers could purchase for much less.magento-ecommerce-logo

David Cid, the CTO of Sucuri wrote the hackers will first create a fake administrator account in the Magento ecommerce database your website is on.  Later, they will come back and execute the attack, crippling your business.

Recommended Next Steps

A patch has been release and you need to immediate update to the lastest version of Magento.Netanel Rubin said “the vulnerability in Magento is composed of several flaws which allow an unauthenticated hacker to run PHP code on a web server. The flaws are within Magento’s core code and affects default installations of Magento’s Community and Enterprise editions.”

Securi’s researchers stated: “always from these two IP addresses from Russia: and If you look for them in your logs, you can see if you have been attacked by the same group.”

This is also the perfect time to check with your SSL companies and ensure that your ecommerce business is protected from hackers.

Check your Google Webmaster Tools account and ensure that your domain is properly setup.  Often times you will receive alerts when Google has detected your website has been hacked.

Funnel Science Website SEO Grader

Check your website’s SEO, or check your competitors.

Get an instant report for free.

"*" indicates required fields

This field is for validation purposes and should be left unchanged.