shouldiuse.io

Comparison

Amasty vs Mirasvit Magento Extensions Store

Amasty and Mirasvit Magento Extensions Store both land on Depends.

Amasty versus Mirasvit Magento Extensions Store
CompareAmastyMirasvit Magento Extensions Store
VerdictDependsDepends
Best forMid-market Magento 2 storesMagento 2 stores needing SEO, reviews, or RMA
Who it's not forShopify or WooCommerce stores . this is Magento-onlyNon-Magento stores (Shopify, WooCommerce, anything else)
PrivacyRecent critical findings: unauthenticated RCE (CVE-2026-53787) in Order Attributes and a mass patch release across 25 extensions; vendor is patching actively.⁵Actively exploited critical RCE (CVE-2026-45247, CVSS 9.3-9.8) in Full Page Cache Warmer; unpatched stores are being compromised.13
Support qualityTrustpilot 4.3/627 positive; Reddit reports mixedUsers call support 'second to none'
Public sentimentOpinions split: long-time users praise the modules, while others complain about pricing moves and integration glitches.10Magento merchants rate Mirasvit 4.6/5 on Trustpilot praising support, while Reddit calls them generally reliable with occasional issues.10
Biggest gotchaPublic weaponized exploit for Order Attributes RCE . patch immediately or risk store compromise⁶CVE-2026-45247 in Full Page Cache Warmer <1.11.12 is CISA-listed and actively exploited . patch immediately13

Pick Amasty when

  • Mid-market Magento 2 stores
  • Stores needing niche checkout or SEO features
  • Adobe Commerce teams with dev resources
  • Hyvä-theme adopters

When Amasty is not a fit

  • Shopify or WooCommerce stores . this is Magento-only
  • Solo merchants with no Magento developer on call
  • Teams that won't patch extensions within days of disclosure
  • Buyers sensitive to aggressive renewal and upsell pricing

Pick Mirasvit Magento Extensions Store when

  • Magento 2 stores needing SEO, reviews, or RMA
  • Budget merchants vs Amasty pricing
  • Agencies running client Magento sites

When Mirasvit Magento Extensions Store is not a fit

  • Non-Magento stores (Shopify, WooCommerce, anything else)
  • Teams with no developer to patch extensions urgently
  • Anyone unwilling to carry third-party server-code risk
  • Set-and-forget owners who skip security advisories

Sources

  1. Amasty official siteamasty.com
    official
  2. Amasty Trustpilot reviews (4.3, 627 reviews)nz.trustpilot.com
    review
  3. Amasty seller rating on G2 (3.4/5, 7 reviews)g2.com
    review
  4. Sansec: Amasty patches dozens of extensions, 2 criticalsansec.io
    security
  5. CVE-2026-53787: Order Attributes unauthenticated file uploadpentest-tools.com
    security
  6. Public weaponized exploit for Amasty RCEgithub.com
    security
  7. Reddit: 'gone full money grab' pricing threadreddit.com
    review
  8. Amasty company profile, ~$20M revenueowler.com
    news
  9. Amasty Crunchbase profile, Adobe Exchange partnercrunchbase.com
    news
  10. Trustpilot reviews of mirasvit.comtrustpilot.com
    review
  11. Who are the best and worst extension vendors? . Reddit r/Magentoreddit.com
    review
  12. Hackers exploit Mirasvit Full Page Cache Warmer RCE . SecurityWeeksecurityweek.com
    security
  13. CVE-2026-45247 . Mirasvit Cache Warmer PHP Object Injection . VulnCheckvulncheck.com
    security
  14. Imperva protection against CVE-2026-45247imperva.com
    security
  15. Mirasvit Full Page Cache Warmer RCE analysisthreat-modeling.com
    security
  16. Magento attack spree using Mirasvit Helpdesk . Wccftechwccftech.com
    news