I've just downloaded patch SUPEE-5344 and installed it, however the file name and applied.patches.list suggest it is SUPEE-5345, not 5344. OK this may be a typo in the code, perhaps, but checking my site with https://shoplift.byte.nl/scan still shows it still to be vulnerable.
How can I tell if this patch is the correct one and worked? Are there pre-requisites for this patch? (eg. 1533)
I'm running magento CE 220.127.116.11 and prior to this patch, none had been applied. Should I revert it and then get and apply ALL security patches available?
I reverted that original patch and applied 1533 then applied that patch again but still the test site shows it as vulnerable. File ownership was reset correctly and cache flushed (though I don't think that was necessary)
I note that the 1533 patch file is called PATCH_SUPEE-1533_EE_1.12.x_v1-2015-02-10-08-19-16.sh despite being downloaded for CE, not EE. Mind you, the patch list file suggests that 5344/5345 was for EE. How trustworthy are these patch files?