Mmastodon TechnologyCybersecurity first seen 3 d ago, last 3 d ago, peak #9

Critical flaws found in JTL-Connector WooCommerce plugin

Original: CVE-2026-87855 and CVE-2026-78193 affect the JTL-Connector for WooCommerce WordPress plugin from ntbyk, all versions up

Two vulnerabilities, CVE-2026-87855 and CVE-2026-78193, have been reported in the JTL-Connector for WooCommerce WordPress plugin, affecting all versions up to and including 2.4.3. One is an unauthenticated arbitrary file upload flaw that can lead to remote code execution, letting attackers run code on vulnerable sites. Security commentators are urging operators of affected shops to patch or disable the plugin until a fixed version is available.

Why now: Remote code execution flaws in a widely used e-commerce plugin pose immediate risk to online shops.

JTL-Connector for WooCommerceWordPressntbykCVE-2026-87855CVE-2026-78193

Open on mastodon →

Evidence

• CVE-2026-87855 and CVE-2026-78193 affect the JTL-Connector for WooCommerce WordPress plugin from ntbyk, all versions up to and including 2.4.3. CVE-2026-87855 is an unauthenticated arbitrary file upload that can lead to remote code execution. CVE-2026-78193 is an… · suriq@infosec.exchange · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/2190431