Magento 2.4.7-p4 has been launched today, Tuesday February 11th 2025
Adobe Commerce has officially released Magento 2.4.7-p4, a security patch that addresses vulnerabilities in previous versions of Magento Open Source and Adobe Commerce 2.4.7. If you run an eCommerce store on Magento 2, this update is crucial for maintaining the security and performance of your website.
Key Updates in Magento 2.4.7-p4
This security release includes essential fixes to protect your website and improve functionality. Below are the most important highlights:
1. Enhanced Encryption Key Management
- Adobe has redesigned the process of managing encryption keys to improve usability and resolve previous issues.
- You can now use new CLI commands to change encryption keys and re-encrypt sensitive data, including:
- System configuration settings
- Payment data
- Custom field data
- Admin UI support for changing encryption keys has been removed, meaning all encryption key changes must now be handled via CLI commands.
2. Security Fix for CVE-2025-24434
- This update resolves an authorization vulnerability that could potentially be exploited by attackers.
- A separate isolated patch is also available if you cannot update your entire system immediately.
For a full list of security fixes, refer to the Adobe Security Bulletin APSB25-08.
Why Keeping Magento 2 Updated is Critical
Security updates like Magento 2.4.7-p4 are vital for protecting your eCommerce store against potential cyber threats. Here’s why keeping your Magento store updated is non-negotiable:
🔒 Protect Against Security Vulnerabilities
Each new update patches known vulnerabilities that hackers could exploit. Delaying updates leaves your store at risk of data breaches, malware infections, and unauthorized access.
⚡ Ensure Payment & Data Security
Magento stores handle sensitive customer data, including payment information. Updates like 2.4.7-p4 enhance encryption and security measures to prevent data theft.
🚀 Improve Website Performance & Stability
Beyond security, updates often include performance improvements and bug fixes that enhance site speed, user experience, and overall stability.
📜 Stay PCI-DSS Compliant
Running an outdated Magento version can lead to non-compliance with PCI-DSS standards, which are required for securely handling credit card transactions.
Need Help Updating Your Magento 2 Store?
Updating Magento can be complex, especially for businesses with custom extensions, third-party integrations, or large product catalogs. If you’re unsure how to apply the Magento 2.4.7-p4 update, our team at DTF Digital is here to help.
As an experienced Magento 2 / Adobe Commerce agency, we specialise in:
✅ Magento version upgrades & security patching
✅ Custom module & extension compatibility checks
✅ Ongoing Magento support & maintenance
📩 Need assistance? Contact us today and keep your Magento store secure and optimised!
