Skip to content
OpenAdvisories

Vendor

ntbyk

3 known vulnerabilities.

Products

JTL-Connector for WooCommerce 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-9234

    JTL-Connector for WooCommerce <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Settings Modification via Multiple Functions

    The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.4.1. This is due to missing capability checks and nonce verification on the admin_post_settings_save_woo-jtl-connector action (ha…

    ntbyk JTL-Connector for WooCommerce Web / CMS