Changelog

Release 8927: Updated Magento version check to support Magento 2.4.4-p2, 2.4.5-p1, and 2.4.6

With the introduction of the new Magento versions (2.4.4-p2, 2.4.5-p1, and 2.4.6), we’ve updated our Magento Version check to support these latest versions. Please note that any version below 2.4.3 is no longer within the supported release line. You can scan your website on magereport.com to verify if you have installed the supported versions successfully….

Release 8125: Magento 2 preinstall updated to 2.4.3

Recently Magento 2.4.3 was released. We updated our default preinstall to this latest version. If you want to take this new Magento version for a spin you can easily deploy it on your Hypernode using the hypernode-systemctl preinstall command-line tool or by selecting the preinstall option when ordering a new Hypernode or starting a new…

Release 7856: Magento 2 preinstall updated to 2.4.2

Recently Magento 2.4.2 was released. Last week we updated our default preinstall to this latest version. If you want to take this new Magento version for a spin you can easily deploy it on your Hypernode using the hypernode-systemctl preinstall command-line tool or by selecting the preinstall option when ordering a new Hypernode or starting…

Updated Magento version check with Magento 2.4.1, 2.4.0-p1 and 2.3.6

Magento Version Check has been updated With the release of these latest Magento versions (2.4.1, 2.4.0-p1 and 2.3.6) we’ve updated our Magento Version check to include these latest versions. You can scan your website on magereport.com to see if you’ve installed the latest versions successfully. To make this check more visible for users visiting the…

Magereport servers OS upgrade

The Magereport servers have been upgraded. This change doesn’t add or change any of the existing Magereport functionality. But it is a general OS and system upgrade. IP will change more often The Magereport servers are now running on a new cloud system, that treats the servers like cattle rather than pets. Long story short…

Magento 1 vulnerability check for open /downloader url

Magento 1 open downloader url check Last weekend over 2000 shops were hacked through a new zero day exploit in Magento 1. Read more about this exploit and how we solved this on our Hypernode platform on our blog. You can now scan your website on magereport.com to see if you are vulnerable to this…

Updated Magento version check with Magento 2.4.0 and 2.3.5-p2

Magento Version Check has been updated With the release of these latest Magento versions (2.4.0 and 2.3.5-p2) we’ve updated our Magento Version check to include these latest versions. You can scan your website on magereport.com to see if you’ve installed the latest versions successfully. To make this check more visible for users visiting the site…

Updated Magento version check, improved our version detection and SUPEE-11295 check

Today Magento released new versions for Magento 1 and Magento 2 which fix several critical security vulnerabilities. Magento Version Check has been updated With the release of these latest Magento versions we’ve updated our Magento Version check to include these latest versions. You can scan your website on magereport.com to see if you’ve installed the…

Results now available as PDF and over 800 new malware signatures

In this release of Magereport we’ve added a long requested feature: downloading the results of your Magereport scan as PDF. We’ve also added over 800 new malware signatures. Download results as PDF Over the past few years downloading your Magereport results as a PDF has been one of the most requested features for Magereport. Users…

MageReport Premium available for all customers

As from now on MageReport Premium is also available for Hypernode customers using the Control Panel (my.hypernode.com). Previously, it was already accessible for customers using the Dutch Service Panel. Accessing MageReport Premium is easy by logging on to MageReport.com with your Hypernode customer account. Choose ‘Sign in with Hypernode’ on your top right. With MageReport.com,…

Updated Magento version check, improved SUPEE-11155 and SUPEE-11219 checks and updated malware signatures

Today Magento released new versions for Magento 1 and Magento 2 which fix several critical security vulnerabilities. Magento Version Check has been updated With the release of these latest Magento versions we’ve updated our Magento Version check to include these latest versions. You can scan your website on magereport.com to see if you’ve installed the…

Add SUPEE-11086, SUPEE-11155, SUPEE-11219, update Magento version check and malware signatures

In this release we updated MageReport and added some checks. You can go directly to MageReport.com to make sure your shop is safe. SUPEE-11086 SUPEE-11086 was released March 26th 2019, but unfortunately we had no time to add this check until this point. We also realised that this patch was not detectable from the outside,…

Show credit card hijack indicators, show no magento install found reasons, improve SUPEE10975 and bugfixes

Credit card hijack indicators We often receive questions about why a shop is showing up as vulnerable for the credit card hijack check. To make this more clear to users we’re now showing exactly which indicators we found on the webshop. This should be relatively easy to use for other checks as well, so expect…

Improved SUPEE-10975, more malware signatures and Cloudflare check removal

Malware signatures In this release we’ve added over 2400 new malware signatures to the credit card hijack check. So make sure to scan your shop for new malware on magereport.com Improved SUPEE-10975 check We recently got messages from several users indicating that the SUPEE-10975 check was giving false positives. We’ve listened to this feedback and…

20190107.1 – Show loading icon for Premium users and bug fixes

Show loading icon for Premium users With the recent addition of running checks in batches and ordering them by failure we accidentally got rid of the loading/scanning icon for premium users. This has now been fixed so premium users can see when MageReport is still busy scanning for checks and retrieving performance information. Interested in…

20181217.1 – Checks ordering, webgility update, generic malicious JS check and more

New check ordering We received a lot of feedback about the ordering of checks. Previously they would be ordered based on the most recently added checks, but this does not always make sense from a user’s perspective. For users it’s a lot more important that checks that fail are shown first so you can get…

20181203.1 – SUPEE-10975, new magento versions, sidebar bugfix, new malware signatures

SUPEE-10975 and new magento versions On the 28th of November Magento released the following versions for Magento: 2.3, 2.2.7, 2.1.16, 1.14.4.0 and 1.9.4.0. In addition to these new versions they also released SUPEE-10975. The new versions plus the SUPEE fix some critical security issues in Magento and it is highly recommended you patch or upgrade…

20181106.1 – Run checks in batches, new patch check, updated Magento version check and new RCE check

Running checks in batches Recently we received some information that under-powered servers could suffer performance loss when scanned by MageReport. This is due to the amount of requests MageReport has to make to determine your shop’s safety. This is of course not our intention, so to fix this we’ve added running checks in batches for…

20181026.1 – Added Magecart zero day extensions checks

Magecart zero day attacks Recently it was brought to light by security researcher Willem de Groot that attackers are making use of unpublished security flaws in about two dozen Magento extensions. The vulnerabilities in these extensions allow the attackers to gain full control over the targeted websites via Remote Code Execution (RCE). Added checks The…

20180925.1 – Updated CC hijack and cryptojacking checks and updated style

Update Credit Card Hijack check Recently MagentoCore and MageCart have been getting some traction as Magento specific malware to skim credit card details. We’ve updated our signatures so we’re able to detect shops infected with this malware. Update Cryptojacking check Recently there were some updates to cryptojacker signatures. We’ve updated our database to make sure…

[MageReport] Release 20180726.1 – Updated Creditcard Hijack check

Updated Creditcard Hijack check We have updated the Creditcard Hijack check to identify several different instances of newly discovered creditcard skimming malware. Other Several minor UI improvements.

[MageReport] Release 20180719.1 – Updated checks and new look & feel

Updated Brute Force Attacks check We have expanded the Brute Force Attacks check to scan additional paths for publicly available admin login pages. Please refer to our updated article for more information on how to protect your Magento installation from brute-force attacks. Updated Creditcard Hijack check We have updated the Creditcard Hijack check to identify several different…

Release 5226: DigitalOcean nodes route outbound port 25 and 587 through dedicated IP, fixed long running processes MageReport check

SMTP traffic on default ports via the non-dedicated IP Recently it came to our attention that in contrast to their normal IPs, DigitalOcean was blocking outbound traffic on ports 25 and 587 on the floating IPs we use to provide the newly introduced dedicated IP feature on Hypernode. This is generally not an issue since…

Release 5041: Automated patch info updates fixed on tools.hypernode.com

As part of the hypernode-magerun Magento plugin bundle there is a command that can list relevant patches for a Magento 1 installation and show whether or not they have been installed. The data of available patches used by this command is retrieved from tools.hypernode.com and originates from this excellent spreadsheet maintained by John Knowles. The…