p PatchFirst

PatchFirst · Latest vulnerabilities

klaviyo/magento2-extension vulnerabilities

Vulnerabilities published for klaviyo/magento2-extension in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. GHSA-hvgw-gg3p-295j

    Not ratedFix available

    Read private customer data reclaiming carts in Klaviyo Magento

    A researcher identified an endpoint in a thirth party module Klaviyo Magento 2 which allows to read private customer data from stores. It works by reclaiming any guest-cart as your own and reading the private data for the orders in the Magento API.

    klaviyo/magento2-extensionPHP
    • Update to 3.0.0
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →