CVE-2026-87855 - JTL-Connector for WooCommerce <= 2.4.3 - Unauthenticated Arbitrary File Upload via 'image.push' Method
CVE ID :CVE-2026-87855 Published : Oct. 14, 2026, 4:18 a.m. | 1 hour, 14 minutes ago Description :The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the...