Magento News

Magento Open Source 2.4.9 is the most demanding PHP application most teams will ever self-host. A working store needs a specific PHP version with a long list of extensions, a supported MariaDB or MySQL, a running OpenSearch cluster, Composer, a web server that understands Magento's pub/ layout, production-mode compilation, static content deployment and a cron job that runs every minute. This guide covers both routes on Ubuntu 24.04 LTS: what a manual installation involves step by step, and how to get the same store running from a single form with Hanoo on a server you own. Either way, you end…

No content.

We've released Catalog Completeness, a free Magento Open Source module: PIM-style completeness scoring inside Magento. It scores every product 0 to 100 against weighted rules you write (present, minimum length, image count, greater than 0, allowed values, regex), then lists what's missing, lowest score first. Channel profiles add per-channel scores, with suggested rules for Google Merchant Center, Amazon, eBay and five others. A periodic rescore runs from Magento cron (every six hours by default) for changes that bypass product saves, a "No rules assigned" view lists products no rule set cove…

We've released Catalog Completeness, a free Magento Open Source module: PIM-style completeness scoring inside Magento. It scores every product 0 to 100 against weighted rules you write (present, minimum length, image count, greater than 0, allowed values, regex), then lists what's missing, lowest score first. Channel profiles add per-channel scores, with suggested rules for Google Merchant Center, Amazon, eBay and five others. A periodic rescore runs from Magento cron (every six hours by default) for changes that bypass product saves, a "No rules assigned" view lists products no rule set cove…

So you know the person behind it. Not a sales pitch, just what StoreFrame is to me: a home for my team, my notes as working code, and the impossible thing I'm glad I tried to build. Heads up: this isn't a product page and it isn't a sales pitch. It's me talking about the thing I've spent years building, with the emotions left in, including a swear word or two. If you're looking for features and pricing, the rest of the site has you covered. This one is just human. It's my digital home StoreFrame, for me, is home. It's where I'm connected with my remote team, my customers, my partners and my o…

I'm exploring different online business websites and would like to understand what makes a website useful, trustworthy, and easy to navigate for customers. When evaluating a business website such as coynn.com, what key factors should I consider regarding website performance, user experience, security, and overall business credibility? For Magento store owners and developers, which tools or best practices do you recommend for assessing these areas and improving the customer experience? I'd appreciate any suggestions or practical advice from the community. Thanks!

Decision needed this week CVE-2026-48356, nicknamed PolyShell, lets anyone on the internet upload a file to a Magento or Adobe Commerce store through its public shopping-cart API, with no login. On many servers that file becomes a backdoor that criminals use to plant card skimmers. Attacks have been running since March 2026, and on 27 October CISA added it to its list of actively exploited flaws, with a 10 November deadline for US federal agencies. If your store has not installed Adobe’s July 2026 security update (APSB26-73), treat it as urgent, and check for signs of compromise even if you h…

I'm working on understanding the best ways to improve storefront performance in Magento 2. Slow page loads can affect the shopping experience, so I'd like to learn which areas should be investigated first. My questions are: How can I identify whether slow page loads are caused by extensions, database queries, or frontend assets? Which Magento 2 built-in caching features should I verify? What tools or commands are useful for diagnosing performance bottlenecks? I'd appreciate practical steps and recommendations for troubleshooting a Magento 2 store. For content-focused websites, such as one pro…

submitted by /u/Excellent_Word5756 [link] [comments]

I built a Magento 2 module that lets other sellers list on your store. Magento stays as it is, no replatforming, MIT license. Installs with composer, works on Magento 2 and Adobe Commerce. Magento stays your commerce engine and the system of record. Sellers and their offers are mirrored in, shown on the product page and in the cart, and the order goes to the marketplace side only after it has been placed in Magento. The marketplace part is covered by Mercur - an open-source marketplace platform on Medusa.js. GitHub: https://github.com/mercurjs/magento2-connector Docs: https://docs.mercurjs.co…

We have integrated Dynamics 365 with Magento, where contacts are synchronized as Magento customers along with their billing and shipping addresses. We are facing a challenge with address synchronization because Dynamics 365 uses a single Full Name field, which can contain either a person's name for a residential address or a company name for a commercial address. In Magento, however, addresses have separate fields for First Name, Last Name, and Company. Here are the two scenarios we need to handle: Residential Address Map the Full Name value from Dynamics 365 to the First Name and Last Name f…

CISA added two severe vulnerabilities to its KEV catalog: CVE-2026-48356 in Adobe Commerce/Magento and CVE-2026-111497 in Google Brotli. Review the details, PolyShell infection vectors, cloud exposure statistics from Wiz, and multi-vendor patch advisories including Node.js. The problem in the Brotli library The first issue concerns the Brotli data compression tool, which is widely used in a number of applications and services worldwide. This vulnerability, known as Node2Shell, HTTP2Shell or Broccoli2Shell, could allow an attacker to corrupt a system's memory, cause a system crash, or even exe…

CVE-2026-48356 is a file upload flaw in Adobe Commerce and Magento, and CISA lists it as exploited. CISA added it to its Known Exploited Vulnerabilities (KEV) catalog on 2026-10-27. If you run either product, find Adobe's bulletin for this CVE and apply its fix or mitigation. Published 2026-10-28. Reviewed by the Buy Exam Voucher security editor. We will update this article when Adobe's version details are available to us. What happened CVE-2026-48356 is an unrestricted upload of file with dangerous type vulnerability. The public record says it could allow arbitrary code execution in the cont…

953 Magento stores, one loader that asks your browser whether you are a scanner Sansec counted 953 online stores carrying a JavaScript loader that has been running since July 2025. Most of them run Magento. The detail that makes this campaign different from the usual card-skimming injection is what the loader does before it decides to do anything: it works out whether the request comes from a real shopper or from a security scanner, and gives the scanner nothing. Where the code sits The loader is stored in the cms_block table of the Magento database, so it is served as ordinary CMS content on…

A PHP vulnerability dropped the night before Meet Magento Germany. Ten things I took home: about people, patching, merchants who choose offline, and why badges don't stop bugs. Last week I was at Meet Magento Germany. I came home with a full notebook, a tired body and one very unusual memory: a security disclosure for PHP itself landed the evening before the conference, while most of us were at the pre-party. Here are ten things I learned that week. Some are about people, some are about patching, and one is a promise. 1. Meeting the people you only read on LinkedIn or GitHub is awesome For ye…

Sansec reports a long-running campaign active since July 2025 that infected 953 online stores, mostly running Magento, by injecting malicious JavaScript loader code into CMS blocks. Analysis reveals infections tied to vulnerabilities including CVE-2026-48356 and CVE-2025-54236, featuring bot-filtering and browser fingerprinting mechanisms. Unknown attackers add small pieces of code to store pages. When a visitor opens an infected page, the code contacts the attackers' servers for further instructions. How visitor control works The perpetrators' systems have mechanisms that distinguish real cu…

submitted by /u/ToweringMediaChicago [link] [comments]

We have created a Quickbooks Online Connector for Magento 2. Check it out https://toweringmedia.com/magento-2-quickbooks-online-connector submitted by /u/ToweringMediaChicago [link] [comments]

Managing B2B customer identities across multiple Magento websites and portals is a complex challenge for enterprise merchants. Disparate customer profiles often lead to inconsistent data, operational inefficiencies, and increased migration risk. This use case breaks down a technical approach to unify B2B customer identities leveraging Magento architecture and Adobe Commerce APIs. The Problem: Fragmented Customer Identities in Multi-Site Magento Deployments Enterprise B2B merchants frequently operate multiple Magento websites and portals to serve different regions, brands, or business units. E…

I run a Spanish baby/children's products store on Magento 2.4.7 (Porto theme, Cloudflare in front, ~15,000 products, ~420 commercial categories, domain since 2010). I have spent nine months and dozens of read-only forensic audits on this, and I'm posting because I've run out of hypotheses, not because I haven't looked. I'll keep it factual; happy to share any log or export. The pattern Product pages rank normally. For a core query like "moisés bebé" (baby bassinet), individual product pages sit at pos. 6-8. The category page for the same query sits at pos. 22-27, and has for two years. It is…