Skip to content
OpenAdvisories

Vendor

ntbyk

3 known vulnerabilities.

Products

JTL-Connector for WooCommerce 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-87855

    JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method

    The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth parameter as a valid …

    ntbyk JTL-Connector for WooCommerce Web / CMS