Composer magento/magento1ee has 24 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2019-7139 | SUPEE-11086 - RCE, XSS, CSRF and other vulnerabilities | unknown | 0.0 | >=1.9.0.0 and <1.14.4.1 | 1.14.4.1 |
| CVE-2019-7932 | PRODSECBUG-2351: Arbitrary code execution via crafted sitemap creation | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-8114 | PRODSECBUG-2462: Remote code execution via file upload in admin import feature | unknown | 0.0 | >=1 and <1.14.4.3 | 1.14.4.3 |
| CVE-2019-7911 | PRODSECBUG-2320: Arbitrary code execution due to unsafe handling of system configuration | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7849 | PRODSECBUG-2095: Defense-in-depth session validation check implemented | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7898 | PRODSECBUG-2300: Information about disabled products can be leaked due to inadequate validation checks | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7899 | PRODSECBUG-2301: Names of disabled products can be leaked due to inadequate validation checks | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-8123 | PRODSECBUG-2445: Insufficient logging and monitoring of configuration changes | unknown | 0.0 | >=1 and <1.14.4.3 | 1.14.4.3 |
| CVE-2019-7889 | PRODSECBUG-2275: Unsafe functionality is exposed via email templates manipulation | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-8152 | PRODSECBUG-2344: Cross-Site Scripting via wysiwyg editor | unknown | 0.0 | >=1 and <1.14.4.3 | 1.14.4.3 |
| CVE-2019-7882 | PRODSECBUG-2246: Stored cross-site scripting in the WYSIWYG editor | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7944 | PRODSECBUG-2378: Stored cross-site scripting in the Return Product comments feature | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7945 | PRODSECBUG-2380: Stored cross-site scripting in the Currency Symbols field | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7938 | Magento 2 Community Edition XSS Vulnerability | medium | 4.8 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7875 | PRODSECBUG-2226: Stored cross-site scripting in the admin panel | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7887 | PRODSECBUG-2270: Reflected cross-site scripting in the admin panel | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7897 | PRODSECBUG-2299: Stored cross-site scripting in the admin panel | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7909 | PRODSECBUG-2317: Stored cross-site scripting in admin panel | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7934 | PRODSECBUG-2353: Stored cross-site scripting in the admin panel | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7935 | PRODSECBUG-2363: Stored cross-site scripting in the admin panel | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7940 | PRODSECBUG-2371: Stored cross-site scripting in the admin panel | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| CVE-2019-7947 | PRODSECBUG-2387: Cross site request forgery attacks are possible via the gift card removal feature | unknown | 0.0 | >=1 and <1.14.4.2 | 1.14.4.2 |
| 2017-02-07 | SUPEE-9652 - Remote Code Execution using mail vulnerability | unknown | 0.0 | >=1.9.0.0 and <1.14.3.2 | 1.14.3.2 |
| 2018-11-28 | SUPEE-10975 - Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities | unknown | 0.0 | >=1.9.0.0 and <1.14.4.0 | 1.14.4.0 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked