3 matches found
EUVD-2026-100800
The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage function. This is due to the startSession function accepting an empty jtlauth parameter as a valid credential, combined with insufficient fil...
9.8CVSS6.1AI score
SaveExploits0References5
CVE-2026-87855
The JTL-Connector for WooCommerce plugin for WordPress (versions
9.8CVSS6.1AI score
SaveExploits0References5
PT-2026-113620
The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage function. This is due to the startSession function accepting an empty jtlauth parameter as a valid credential, combined with insufficient fil...
9.8CVSS
SaveExploits0References6
20