ntbyk has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.7 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10

Exploited share: 0% vs 1% corpus
Median CVSS: 8.7
Publish → KEV: —
Last 90 days: 2 prev 0

Weakness classes

Products

JTL-Connector for WooCommerce 2

Follow ntbyk:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

ntbyk vulnerabilities

CVEs affecting ntbyk, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-87855Critical· 9.8

2w ago

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 2.4.3 via the saveImage() function. This is due to the startSession() function accepting an empty jtlauth…

▾ Midnightntbyk · JTL-Connector for WooCommerceEPSS 0.79%via NVD

CVE-2026-78193High· 7.5

2w ago

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Identity Endpoint in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter…

The JTL-Connector for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via 'product.push' Identity Endpoint in all versions up to, and including, 2.4.3 due to insufficient escaping on the user supplied parameter…

▾ Twilightntbyk · JTL-Connector for WooCommerceEPSS 0.42%via NVD