shouldiuse.io

Report

Should I Use Mirasvit Magento Extensions Store?

mirasvit.com·Analyzed 19 hours ago··Based on 12 sources

Mirasvit develops extensions for Magento which will provide you with solving a wide range of tasks. We create both free and paid modules which we constantly upgrade.

Depends

Depends

Buy if you run a Magento store, need SEO/reviews/RMA functionality, and have a developer who can patch fast.

Well-priced Magento extensions with loved support — but patch fast: one has an actively exploited critical RCE.

Confidence: Medium

4.6/5

Trustpilot rating

75 reviews

$169–$179

Typical price

per extension, per year

Yes

Free tier

free and paid modules

30 days

Money-back

100% refund guarantee

Value for money4

Undercuts Amasty: $169 vs $209/year

Feature depth4

Catalog spans SEO, RMA, reviews, store credit, blog

Support quality5

Users call support 'second to none'

Security posture2

Actively exploited critical RCE, CISA-listed

Pros

  • 4.6/5 Trustpilot rating across 75 reviews¹
  • Users call support 'second to none'¹
  • Cheaper than rivals: $169/year vs Amasty's $209⁹
  • Broad catalog: SEO, reviews, RMA, store credit, blog10
  • Reddit ranks them among decent Magento extension vendors²

Cons

  • Critical RCE in Cache Warmer actively exploited in the wild³
  • Helpdesk extension was targeted in 2017 attack spree⁷
  • Per-extension yearly licenses multiply costs across a catalog⁹
  • No dedicated security page found on vendor site
  • Reddit concedes extensions 'have issues, but not too often'²

Gotchas

  • highCVE-2026-45247 in Full Page Cache Warmer <1.11.12 is CISA-listed and actively exploited — patch immediately⁴
  • mediumLicenses renew yearly per extension; multiple modules multiply recurring costs⁹
  • mediumGuess: third-party extensions can break on Magento upgrades; plan regression testing²
  • low30-day refund window is short; test extensions in staging before committing⁸

Best for

  • Magento 2 stores needing SEO, reviews, or RMA
  • Budget merchants vs Amasty pricing
  • Agencies running client Magento sites

Not for

  • Non-Magento stores (Shopify, WooCommerce, anything else)
  • Teams with no developer to patch extensions urgently
  • Anyone unwilling to carry third-party server-code risk
  • Set-and-forget owners who skip security advisories

Pricing

Per-extension annual license

$169–$179/year

  • Advanced SEO Suite M2: $179
  • Advanced Product Reviews: $169/year
  • 30-day 100% money-back guarantee

Security

Actively exploited critical RCE (CVE-2026-45247, CVSS 9.3–9.8) in Full Page Cache Warmer; unpatched stores are being compromised.

  • CVE-2026-45247 — RCE in Full Page Cache Warmer < 1.11.12Unsafe PHP deserialization allows remote code execution. CVSS 9.3–9.8, added to CISA Known Exploited Vulnerabilities catalog; hackers actively exploiting.⁴
  • Helpdesk extension targeted in attack campaign (2017)Cybercriminals targeted Magento sites running Mirasvit Helpdesk, a popular helpdesk extension, in an attack spree.⁷

What users say

Magento merchants rate Mirasvit 4.6/5 on Trustpilot praising support, while Reddit calls them generally reliable with occasional issues.

“Purchased multiple extensions for Magento 2 for our websites and web clients. They are all excellent and the support is second to none.”
— Trustpilot review, Feb 26, 2025
“Agree with others that Amasty, Mirasvit, Swisslab and Aheadwork usually do decent extensions. They have issues, but not too often”
— Reddit, r/Magento

Alternatives

Compare Mirasvit Magento Extensions Store with each alternative.

Full analysis

Based on ~20 public sources: Trustpilot, Reddit, security trackers, and vendor comparisons.

Sources

  1. Trustpilot reviews of mirasvit.comtrustpilot.com
    review
  2. Who are the best and worst extension vendors? — Reddit r/Magentoreddit.com
    review
  3. Hackers exploit Mirasvit Full Page Cache Warmer RCE — SecurityWeeksecurityweek.com
    security
  4. CVE-2026-45247 — Mirasvit Cache Warmer PHP Object Injection — VulnCheckvulncheck.com
    security
  5. Imperva protection against CVE-2026-45247imperva.com
    security
  6. Mirasvit Full Page Cache Warmer RCE analysisthreat-modeling.com
    security
  7. Magento attack spree using Mirasvit Helpdesk — Wccftechwccftech.com
    news
  8. Magento 2 Extensions — official Mirasvit sitemirasvit.com
    official
  9. Best Magento Reviews Extensions 2026 — WiserReviewwiserreview.com
    review
  10. Magento 2 SEO Suites Comparison: Mirasvit vs Mageworx — Firebearfirebearstudio.com
    review
  11. Best Magento 2 Extensions — Scandiwebscandiweb.com
    review
  12. Mirasvit on Adobe Commerce Marketplacecommercemarketplace.adobe.com
    official

Rate this review

Anonymous. You can change your vote.

Loading votes…

Ask a follow-up

Ask if a use case fits. Answers stay inside this report and its sources.

    Comments

    One queue. No replies. Give a display name first. Limit: 7 comments per day.

    Save a name to write a comment.

    No comments yet.