Actively exploited vulnerabilities affecting Mirasvit products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2026-45247https://wildfortech.com/security#CVE-2026-45247This vulnerability allows an unauthenticated attacker to send a specially crafted serialized PHP object via the CacheWarmer cookie, triggering PHP deserialization flaws that result in full remote code execution on the server. No login or privileges are required, meaning any internet-exposed Magento store running this extension is at risk of complete server compromise. The ease of exploitation and severity of the outcome make this a critical priority for any organization running the affected plugin.Wed, 03 Jun 2026 00:00:00 GMTMirasvitMirasvit Full Page Cache Warmer