Last April, Check Point researchers identified a critical vulnerability in Magento, eBay's popular e-commerce platform used by a large number of businesses to host their online stores.
The vulnerability, also known as Shoplift, was patched immediately, and eBay has since taken steps to improve the platform's overall security, gradually releasing a set of updates over the past few months.
80% of all Magento-powered stores are still at risk
According to research by the company Byte (which has created an online tool that allows e-shop owners to check if their website is vulnerable), more than 173,000 websites are vulnerable to this particular security flaw at the given time, despite the fact that 5 months have already passed since the vulnerability was fixed.
Successful exploitation of the vulnerability could allow hackers to compromise any Magento-based e-shop, gaining access to credit card details, as well as other sensitive, financial, and personal customer data.
Most of the stores still at risk are using the free version of Magento (Community Edition), as the paid version (Enterprise Edition) is quite expensive, and usually users who can afford to pay for the license are also able to hire a technician to take over the process of updating their website.
Considering that the Magento upgrade process is quite difficult, something one would not expect from such a high-end platform, it is almost impossible for ordinary users without technical skills to perform, which partly explains the slow updates of e-shops.
To check and see if your site is vulnerable to any of the vulnerabilities discovered in recent months in Magento, you can use Byte's new tool.
In addition, the company has created an infographic to help administrators understand the importance of promptly updating their store code, not only for the effective protection of their e-shops, but also for the security of their customers' data.
