Sploitus

197 exploited vulnerabilities in Commerce

Showing 1–50 of 197, highest-scoring first

Vendors
Adobe
With known exploits
197
Affected Adobe Commerce versions
= 2.4.2, 2.4.3, 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.3.0, 2.3.6, 2.3.7, 2.4.8, 2.4.9
Affected Adobe Commerce Webhooks versions
< 1.5.0
Affected Adobe Magento versions
= 2.4.4, 2.4.5, 2.4.6, 2.4.7, 2.3.0, 2.3.6, 2.4.2, 2.3.7, 2.4.3
Affected Magento versions
< 2.3.7, 2.4.3, 2.4.4

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2026-48358
CVSS 10.0 CRITICAL 2026-07-14
CVE-2026-48356
CVSS 10.0 CRITICAL 2026-07-14
CVE-2024-45115
CVSS 10.0 CRITICAL 2024-10-08
CVE-2024-34102 25 exploits
CVSS 10.0 CRITICAL 2024-06-11FIX AVAILABLE
Exploit for Improper Restriction of XML External Entity Reference in Adobe CommerceExploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CVE-2023-38218
CVSS 10.0 HIGH 2023-07-13FIX AVAILABLE
CVE-2022-35698
CVSS 10.0 CRITICAL 2022-10-11FIX AVAILABLE
CVE-2022-24086 5 exploits
CVSS 10.0 CRITICAL 2022-02-13FIX AVAILABLE
Exploit for Improper Input Validation in Adobe CommerceExploit for Improper Input Validation in Adobe Commerce
CVE-2025-24434
CVSS 9.7 CRITICAL 2025-02-11FIX AVAILABLE
CVE-2024-34103
CVSS 9.2 CRITICAL 2024-06-11
CVE-2026-47988
CVSS 9.1 CRITICAL 2026-07-14
CVE-2026-47984
CVSS 9.1 CRITICAL 2026-07-14
CVE-2025-47110
CVSS 9.1 CRITICAL 2025-06-10FIX AVAILABLE
CVE-2025-24409
CVSS 9.1 CRITICAL 2025-02-11
CVE-2024-34108
CVSS 9.1 CRITICAL 2024-06-11
CVE-2024-20719
CVSS 9.1 CRITICAL 2024-02-15
CVE-2024-20720
CVSS 9.1 CRITICAL 2024-02-15FIX AVAILABLE
CVE-2023-38208
CVSS 9.1 CRITICAL 2023-08-08FIX AVAILABLE
CVE-2023-29297
CVSS 9.1 CRITICAL 2023-06-13FIX AVAILABLE
CVE-2022-24093
CVSS 9.1 CRITICAL 2022-04-12FIX AVAILABLE
CVE-2022-34253
CVSS 9.1 CRITICAL 2022-08-09FIX AVAILABLE
CVE-2026-47992
CVSS 9.0 HIGH 2026-07-14
CVE-2025-24411
CVSS 9.0 HIGH 2025-02-11
CVE-2024-45148
CVSS 9.0 HIGH 2024-10-08
CVE-2024-39397
CVSS 9.0 CRITICAL 2024-08-13FIX AVAILABLE
CVE-2024-39401
CVSS 9.0 HIGH 2024-08-13
CVE-2024-39402
CVSS 9.0 HIGH 2024-08-13
CVE-2024-34109
CVSS 9.0 HIGH 2024-06-11
CVE-2024-34110
CVSS 9.0 HIGH 2024-06-11
CVE-2024-20758
CVSS 9.0 CRITICAL 2023-12-04
CVE-2022-42344
CVSS 9.0 HIGH 2022-08-09FIX AVAILABLE
CVE-2022-34254
CVSS 9.0 HIGH 2022-08-09FIX AVAILABLE
CVE-2025-24437
CVSS 8.8 HIGH 2025-02-11
CVE-2025-24436
CVSS 8.8 HIGH 2025-02-11FIX AVAILABLE
CVE-2022-34255
CVSS 8.8 HIGH 2022-08-09FIX AVAILABLE
CVE-2026-47994
CVSS 8.7 HIGH 2026-07-14
CVE-2026-34686
CVSS 8.7 HIGH 2026-05-12FIX AVAILABLE
CVE-2026-34653
CVSS 8.7 HIGH 2026-05-12FIX AVAILABLE
CVE-2026-21290
CVSS 8.7 HIGH 2026-03-10FIX AVAILABLE
CVE-2025-49557
CVSS 8.7 HIGH 2025-08-12FIX AVAILABLE
CVE-2025-24438
CVSS 8.7 HIGH 2025-02-11
CVE-2025-24417
CVSS 8.7 HIGH 2025-02-11
CVE-2025-24416
CVSS 8.7 HIGH 2025-02-11
CVE-2025-24415
CVSS 8.7 HIGH 2025-02-11
CVE-2025-24414
CVSS 8.7 HIGH 2025-02-11
CVE-2025-24413
CVSS 8.7 HIGH 2025-02-11
CVE-2025-24412
CVSS 8.7 HIGH 2025-02-11
CVE-2025-24410
CVSS 8.7 HIGH 2025-02-11
CVE-2024-34104
CVSS 8.7 HIGH 2024-06-11
CVE-2023-38219
CVSS 8.7 HIGH 2023-10-03
CVE-2026-47995
CVSS 8.5 HIGH 2026-07-14