Magento has released the following critical security announcement:
In light of the concerns raised in this alert, we advise all store owners to:
- Confirm that your Magento install is running the latest version and that all security patches have been installed.
- Test the site on https://www.magereport.com to identify any potential vulnerabilities.
- Run a diff comparison of core Magento files against a freshly downloaded copy to see if there are any modified or extra files.
Please contact Reliable Penguin if you need assistance with any of these tasks.