Amasty vulnerabilities
We track 1 vulnerability in Amasty products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on June 12, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Amasty vulnerabilities
- 9.8 Critical severity
Order Attributes for Magento 2: Unrestricted Upload of File with Dangerous Type
Amasty Order Attributes for Magento 2 before version 4.0.0 contains an unauthenticated arbitrary file upload vulnerability that allows unauthenticated attackers to write arbitrary files to the store's media directory by submitting files of any type or name to