Known Vulnerabilities for JTL Shop by JTL Software
Listed below are 10 of the newest known vulnerabilities associated with "JTL Shop" by "JTL Software".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-78000 json | Joomla Extension - j2commerce.com - Reflected XSS via `filter_tag`, `pricefrom` and `priceto` in J2Store 1.0.0-3.3.21, 4.0.0-... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-77693 json | The Order Tip for WooCommerce WordPress plugin before 1.6.0 does not check the capability of the user requesting a file delet... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-75971 json | The ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution plugin for WordPress is vulnerable to ... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-74251 json | Joomla Extension - phoca.cz - Unauthenticated SQL injection via attribute filter in Phoca Cart 5.0.0-6.1.6 - The a[] (attrib... | Not Provided | 2026-08-16 | 2026-08-18 |
| CVE-2026-73383 json | Shop manager Arbitrary File Download in CTX Feed <= 6.6.47 versions. | Not Provided | 2026-08-18 | 2026-08-18 |
| CVE-2026-67362 json | Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - Fou... | Not Provided | 2026-08-21 | 2026-08-21 |
| CVE-2026-66832 json | When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is appended... | Not Provided | 2026-08-11 | 2026-08-12 |
| CVE-2026-66709 json | Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions. | Not Provided | 2026-08-06 | 2026-08-06 |
| CVE-2026-66475 json | Shop manager Cross Site Scripting (XSS) in Checkout Field Editor for WooCommerce – Checkout Manager <= 3.0.5 versions. | Not Provided | 2026-07-27 | 2026-07-27 |
| CVE-2026-65559 json | Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions. | Not Provided | 2026-08-06 | 2026-08-06 |