Threat database

The JTL-Connector for WooCommerce WordPress plugin is affected by a critical arbitrary file upload vulnerability in all versions up to and including 2.4.3. This flaw arises from improper authentication handling and insufficient file type validation, allowing unauthenticated attackers to upload potentially executable files. Successful exploitation could lead to remote code execution on the affected system.

The JTL-Connector for WooCommerce WordPress plugin is vulnerable to a time-based SQL Injection via the 'product.push' identity endpoint in all versions up to and including 2.4.3. This vulnerability allows unauthenticated attackers to inject additional SQL queries due to insufficient escaping and lack of prepared statements, potentially exposing sensitive database information. Exploitation occurs before the product handling logic, enabling the attack even if downstream processes would normally reject the request.

The JTL-Connector for WooCommerce WordPress plugin versions up to and including 2.4.1 suffers from missing authorization checks. This vulnerability allows authenticated users with Subscriber-level access or higher to modify plugin settings, download developer log files, and delete those log files due to missing capability checks and nonce verification in specific admin and AJAX actions.