Magento has just released updates to provide security enhancements for both the Magento 2 and Magento 1 platforms. Magento has provided information that the risks dealt with in these updates are major for older Magento 1 versions and critical for older Magento 2 versions.
What do Magento 1 site owners need to do?
If you’re running a version of Magento Commerce prior to 1.14.4.0 or Open Source prior to 1.9.4.0, you should apply the SUPEE-10975 security patch as a matter of priority.
The name of version you are running is shown at the bottom of your admin panel.
For more information about the Magento 1 updates, see the release notes from Magento.
What about the Magento 2 Update?
If you are running Magento 2.2.7 or 2.1.16, you should apply the security fixes immmediately.
For more details about the Magento 2 security updates, see Magento’s release notes here.
Next steps
We recommend that our clients find time to get in touch so we can help ensure your Magento site security is up to date. You can also run the Magento Security Scanning Tool to check your site’s security status. At magic42, we take security seriously. Speak to one of our Magento Solution Specialists if you have any concerns about your website’s security.
