Magento has released new security patches for Magento 1.x merchants and Magento 2.x merchants.

Magento 1 Merchants

SUPEE-10888, Magento Commerce 1.14.3.10 and Open Source 1.9.3.10 contain multiple security enhancements that help close cross-site scripting (XSS), cross-site request forgery (CSRF) and other vulnerabilities. Please click here for more information on all fixes included in this patch.

Magento 2 Merchants

Magento Commerce and Open Source 2.2.6 and 2.1.15 contain multiple security enhancements that help close Cross-Site Scripting (XSS) and other vulnerabilities. Please click here for more information of 2.x updates.

We strongly suggest to upgrade your Magento sites as soon as possible to ensure your site is protected with up-to-date updates.

If you would like us to install the patches or upgrade to the latest version, please contact us: