Security Magento 2.1.6 Shell Upload / Cross Site Request Forgery April 12, 2017 007admin Leave a comment Magento versions 2.1.6 and below suffers from cross site request forgery and shell upload vulnerabilities.