← All frameworks
35
Magento
legacy
php · ecommerce · since 2008
caution
↓
6.2 pts
vs last month
Updated June 2026
Magento scores 35/100. Consider migrating to: shopify, nextjs.
Dimension breakdown
Security
600 total CVEs on record. 78 critical severity. 6 actively exploited (CISA KEV).
Total Cves
600
Critical Cves
78
Exploited Cves
6
Avg Cvss
7.2
Cves Last Year
90
Performance
Average performance. Room for optimization.
Ecosystem
11,500 GitHub stars. 300 contributors. 4 releases in the last year.
Stars
11,500
Contributors
300
Releases Last Year
4
Avg Issue Close Days
120
Ai Readiness
Very poor AI-readiness. Closed ecosystem or heavy client-side rendering. Not designed for machine consumption. Consider migration for AI-first use cases.
Structured Output
30
Api First
0.0
Headless Capable
0.0
Developer Experience
Below-average developer experience. Legacy patterns, complex configuration.
Market Trajectory
Score
25
Market Share Pct
0.8
Cost Of Ownership
High cost. Significant hosting, maintenance, and security patching burden.
Actively exploited vulnerabilities
Updated 2026-08-09
3 entries
3 confirmed vulnerabilities being actively exploited in real attacks right now. Source: CISA Known Exploited Vulnerabilities.
Latest entry: 2025-10-24
Magento scores 35/100 overall. Strongest dimension: performance (65). Weakest: security (25).
