shouldiuse.io

Categories

VERDICT

Mirasvit Magento Extensions Store Review

Depends

Should I use Mirasvit Magento Extensions Store?

Mirasvit develops extensions for Magento which will provide you with solving a wide range of tasks. We create both free and paid modules which we constantly upgrade. - mirasvit.com

· 1 month ago

Buy if you run a Magento store, need SEO/reviews/RMA functionality, and have a developer who can patch fast. Skip entirely if you're not on Magento or can't apply urgent security updates.

Confidence

Medium. Based on ~20 public sources: Trustpilot, Reddit, security trackers, and vendor comparisons.

Ratings

  • Value for money
  • Ease of useNo usability evidence found
  • Feature depth
  • Support quality
  • Security posture

Pricing

$169–$179/year

Per-extension annual license

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • Magento 2 stores needing SEO, reviews, or RMA
  • Budget merchants vs Amasty pricing
  • Agencies running client Magento sites

Not for

  • Non-Magento stores (Shopify, WooCommerce, anything else)
  • Teams with no developer to patch extensions urgently
  • Anyone unwilling to carry third-party server-code risk
  • Set-and-forget owners who skip security advisories

Gotchas - check before you buy

high

CVE-2026-45247 in Full Page Cache Warmer <1.11.12 is CISA-listed and actively exploited — patch immediately

medium

Licenses renew yearly per extension; multiple modules multiply recurring costs

medium

Guess: third-party extensions can break on Magento upgrades; plan regression testing

low

30-day refund window is short; test extensions in staging before committing

Pros and cons

Pros

  • 4.6/5 Trustpilot rating across 75 reviews
  • Users call support 'second to none'
  • Cheaper than rivals: $169/year vs Amasty's $209
  • Broad catalog: SEO, reviews, RMA, store credit, blog
  • Reddit ranks them among decent Magento extension vendors

Cons

  • Critical RCE in Cache Warmer actively exploited in the wild
  • Helpdesk extension was targeted in 2017 attack spree
  • Per-extension yearly licenses multiply costs across a catalog
  • No dedicated security page found on vendor site
  • Reddit concedes extensions 'have issues, but not too often'

Sources & method

- 12 sources - Actively exploited critical RCE (CVE-2026-45247, CVSS 9.3–9.8) in Full Page Cache Warmer; unpatched stores are being compromised.

official x2review x5security x4news x1
  • CVE-2026-45247 — RCE in Full Page Cache Warmer < 1.11.12, Unsafe PHP deserialization allows remote code execution. CVSS 9.3–9.8, added to CISA Known Exploited Vulnerabilities catalog; hackers actively exploiting.
  • Helpdesk extension targeted in attack campaign (2017), Cybercriminals targeted Magento sites running Mirasvit Helpdesk, a popular helpdesk extension, in an attack spree.

Key stats

  • Value for money: 4/5

    Rating

  • $169–$179/year

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 4/5. Undercuts Amasty: $169 vs $209/year
  • Ease of use. No usability evidence found
  • Feature depth: 4/5. Catalog spans SEO, RMA, reviews, store credit, blog
  • Support quality: 5/5. Users call support 'second to none'
  • Security posture: 2/5. Actively exploited critical RCE, CISA-listed
  • 4.6/5 Trustpilot rating 75 reviews
  • $169–$179 Typical price per extension, per year
  • Yes Free tier free and paid modules
  • 30 days Money-back 100% refund guarantee

Pricing

Per-extension annual license

$169–$179/year

  • Advanced SEO Suite M2: $179
  • Advanced Product Reviews: $169/year
  • 30-day 100% money-back guarantee

Security

Actively exploited critical RCE (CVE-2026-45247, CVSS 9.3–9.8) in Full Page Cache Warmer; unpatched stores are being compromised.

  • CVE-2026-45247 — RCE in Full Page Cache Warmer < 1.11.12Unsafe PHP deserialization allows remote code execution. CVSS 9.3–9.8, added to CISA Known Exploited Vulnerabilities catalog; hackers actively exploiting.⁴
  • Helpdesk extension targeted in attack campaign (2017)Cybercriminals targeted Magento sites running Mirasvit Helpdesk, a popular helpdesk extension, in an attack spree.⁷

What users say

Magento merchants rate Mirasvit 4.6/5 on Trustpilot praising support, while Reddit calls them generally reliable with occasional issues.

“Purchased multiple extensions for Magento 2 for our websites and web clients. They are all excellent and the support is second to none.”
Trustpilot review, Feb 26, 2025
“Agree with others that Amasty, Mirasvit, Swisslab and Aheadwork usually do decent extensions. They have issues, but not too often”
Reddit, r/Magento

Alternatives

Compare Mirasvit Magento Extensions Store with each alternative.

Full analysis

Based on ~20 public sources: Trustpilot, Reddit, security trackers, and vendor comparisons.

Well-priced Magento extensions with loved support — but patch fast: one has an actively exploited critical RCE.

Methodology

Based on ~20 public sources: Trustpilot, Reddit, security trackers, and vendor comparisons.

Read how a report is made.

Sources

  1. Trustpilot reviews of mirasvit.comtrustpilot.com
    review
  2. Who are the best and worst extension vendors? — Reddit r/Magentoreddit.com
    review
  3. Hackers exploit Mirasvit Full Page Cache Warmer RCE — SecurityWeeksecurityweek.com
    security
  4. CVE-2026-45247 — Mirasvit Cache Warmer PHP Object Injection — VulnCheckvulncheck.com
    security
  5. Imperva protection against CVE-2026-45247imperva.com
    security
  6. Mirasvit Full Page Cache Warmer RCE analysisthreat-modeling.com
    security
  7. Magento attack spree using Mirasvit Helpdesk — Wccftechwccftech.com
    news
  8. Magento 2 Extensions — official Mirasvit sitemirasvit.com
    official
  9. Best Magento Reviews Extensions 2026 — WiserReviewwiserreview.com
    review
  10. Magento 2 SEO Suites Comparison: Mirasvit vs Mageworx — Firebearfirebearstudio.com
    review
  11. Best Magento 2 Extensions — Scandiwebscandiweb.com
    review
  12. Mirasvit on Adobe Commerce Marketplacecommercemarketplace.adobe.com
    official

Add this review to your site

This check for Mirasvit Magento Extensions Store says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends Mirasvit Magento Extensions Store Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.