shouldiuse.io

Categories

VERDICT

Amasty Review

Depends

Should I use Amasty?

Magento 2 extension vendor - amasty.com

· 1 month ago

Worth buying if you run Magento 2 and need a specific feature, with a developer who applies security patches fast. Avoid if you're not on Magento, lack dev support, or dislike recurring renewal pricing.

Confidence

Medium. Based on 20+ public sources including G2, Trustpilot, Sansec, GitHub, and Reddit threads

Ratings

  • Value for money
  • Ease of useNo direct usability evidence found
  • Feature depth
  • Support quality
  • Security posture

Pricing

Not disclosed

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Mid-market Magento 2 stores
  • Stores needing niche checkout or SEO features
  • Adobe Commerce teams with dev resources
  • Hyvä-theme adopters

Not for

  • Shopify or WooCommerce stores — this is Magento-only
  • Solo merchants with no Magento developer on call
  • Teams that won't patch extensions within days of disclosure
  • Buyers sensitive to aggressive renewal and upsell pricing

Gotchas - check before you buy

high

Public weaponized exploit for Order Attributes RCE — patch immediately or risk store compromise

medium

Renewal fees and aggressive upsells; Reddit calls recent pricing moves a 'money grab'

medium

Compatibility issues reported; Custom Forms allegedly fails to trigger Trustpilot AFS

low

Community sentiment on extension vendors is mixed — vet each module separately before buying

Pros and cons

Pros

  • Huge catalog of Magento 2 extensions across sales, UX, and admin
  • Established Adobe Commerce vendor, ~$20M revenue, no debt to investors
  • Trustpilot 4.3/5 across 627 reviews
  • Does patch disclosed vulnerabilities — 25 extensions fixed in one release
  • Moving Hyvä-first for faster storefronts

Cons

  • CVE-2026-53787: unauthenticated file upload leading to remote code execution
  • Fully weaponized public exploit for that RCE exists
  • Mass patch release across 25 extensions, 2 rated critical
  • Community complaints about pricing becoming a 'money grab'
  • G2 vendor rating is only 3.4/5

Sources & method

- 9 sources - Recent critical findings: unauthenticated RCE (CVE-2026-53787) in Order Attributes and a mass patch release across 25 extensions; vendor is patching actively.

official x1review x3security x3news x2
  • CVE-2026-53787 — Unauthenticated arbitrary file upload / RCE in Order Attributes, Unauthenticated file upload in versions below 4.0.0 enables remote code execution; a weaponized exploit is publicly available.
  • Mass security patch release across the extension catalog, Amasty patched 25 extensions after coordinated disclosures; 2 issues were rated critical.

Key stats

  • Value for money: 2/5

    Rating

  • Not disclosed

    Starting price

  • 9

    Sources

  • Analyzed

  • Value for money: 2/5. Reddit users call pricing a 'money grab'
  • Ease of use. No direct usability evidence found
  • Feature depth: 4/5. Vast catalog: checkout, SEO, security, segmentation
  • Support quality: 3/5. Trustpilot 4.3/627 positive; Reddit reports mixed
  • Security posture: 2/5. RCE CVE plus 25-extension mass patch release
  • 4.3/5 Trustpilot 627 reviews
  • 3.4/5 G2 vendor rating 7 reviews
  • ~$20M Revenue Owler estimate
  • Bootstrapped Funding No outside investment

Pricing

Not disclosed

Security

Recent critical findings: unauthenticated RCE (CVE-2026-53787) in Order Attributes and a mass patch release across 25 extensions; vendor is patching actively.

  • CVE-2026-53787 — Unauthenticated arbitrary file upload / RCE in Order AttributesUnauthenticated file upload in versions below 4.0.0 enables remote code execution; a weaponized exploit is publicly available.⁵
  • Mass security patch release across the extension catalogAmasty patched 25 extensions after coordinated disclosures; 2 issues were rated critical.⁴

What users say

Opinions split: long-time users praise the modules, while others complain about pricing moves and integration glitches.

“So Amasty have gone full money grab with their”
Reddit, r/Magento
“I can only say good things about Am”
Reddit, r/Magento
“Amasty review module is best”
Review snippet, Amasty listing
Full analysis

Based on 20+ public sources including G2, Trustpilot, Sansec, GitHub, and Reddit threads

Magento-only extension powerhouse with a huge catalog — but a public RCE exploit and 25-extension patch wave demand fast patching.

Methodology

Based on 20+ public sources including G2, Trustpilot, Sansec, GitHub, and Reddit threads

Read how a report is made.

Sources

  1. Amasty official siteamasty.com
    official
  2. Amasty Trustpilot reviews (4.3, 627 reviews)nz.trustpilot.com
    review
  3. Amasty seller rating on G2 (3.4/5, 7 reviews)g2.com
    review
  4. Sansec: Amasty patches dozens of extensions, 2 criticalsansec.io
    security
  5. CVE-2026-53787: Order Attributes unauthenticated file uploadpentest-tools.com
    security
  6. Public weaponized exploit for Amasty RCEgithub.com
    security
  7. Reddit: 'gone full money grab' pricing threadreddit.com
    review
  8. Amasty company profile, ~$20M revenueowler.com
    news
  9. Amasty Crunchbase profile, Adobe Exchange partnercrunchbase.com
    news

Add this review to your site

This check for Amasty says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Amasty Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.