What’s Vulnerable › Products

ntbyk JTL-Connector for WooCommerce vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your ntbyk JTL-Connector for WooCommerce version is affected

Latest ntbyk JTL-Connector for WooCommerce vulnerabilities

• CVE-2026-87855 — JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method (CVSS 9.8)
• CVE-2026-78193 — JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated SQL Injection (CVSS 7.5)
• CVE-2026-9234 — JTL-Connector for WooCommerce <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Settings Modification via Multiple Functions (CVSS 4.3)