VYPR

JTL-Connector for WooCommerce

by WordPress

CVEs (1)

  • CVE-2026-9234MedJun 2, 2026
    risk 0.28cvss 4.3epss

    The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.4.1. This is due to missing capability checks and nonce verification on the admin_post_settings_save_woo-jtl-connector action (handled by…