Advisories · Technology

ntbyk JTL-Connector for WooCommerce.

Every CVE that names ntbyk JTL-Connector for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87855 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method
- ntbyk JTL-Connector for WooCommerce
- Unrestricted file upload
Not analysed yet 14 Oct 2026
CVE-2026-78193 CVE record

CVSS 7.5 High

JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated SQL Injection
- ntbyk JTL-Connector for WooCommerce
- SQL injection
Not analysed yet 14 Oct 2026
CVE-2026-9234 CVE record

CVSS 4.3 Medium

JTL-Connector for WooCommerce <= 2.4.1 - Missing Authorization to Authenticated (Subscriber+) Settings Modification via Multiple Functions
- ntbyk JTL-Connector for WooCommerce
- Broken access control
Not analysed yet 2 Jun 2026