Shoplift bug :: Is your Magento shop vulnerable to it(SUPEE-5344)?

  • Nidhi Arora
  • 6 years
image_pdfPrintimage_printSave as PDF

Yesterday, Magento sent a critical reminder to all the store owners. The reminder was sent to all the store owners who have not updated their Magento yet for a vulnerability named as “Shoplift (SUPEE-5344)”. The bug was first detected in the month of Feb and Magento sent an update to its  users to update their store.


Yesterday Magento did a random check and found 60% of the website were not updated yet which counts to around 140,000 Magento installed online shops globally. It is expected that in next 48 hours most of the website will be effected by this bug.

Shoplift is a term given to a bug that allows hackers to take full control of your Magento Store. There was a patch released for it in February called “SUPEE-5344” but yesterday’s check by Magento confirms that around 60% of Magento installations are still open to this vulnerability.

The message from Magento takes you to the page on their website that give you information on how to update and apply the patch. Upon some more research we came across this website called Byte which claims to check and confirm if your website is effected by this bug. You can have a check about this here.

Incase if you need help to update your website quickly for this bug, Reach us Now.

Join us for a FREE webinar