Skip to content
OpenAdvisories

Vendor

Guru Team

4 known vulnerabilities.

Products

Bot for Telegram on WooCommerce 3 Site Chat on Telegram 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-109516

    Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token

    The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0. The `/wp-json/woo-telegram/v1/main/` REST endpoint is registered with `permission_callback…

    Guru Team Bot for Telegram on WooCommerce Web / CMS
  • Critical 9.8
    CVE-2025-30949

    WordPress Site Chat on Telegram plugin <= 1.0.4 - PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in Guru Team Site Chat on Telegram site-chat-on-telegram allows Object Injection.This issue affects Site Chat on Telegram: from n/a through <= 1.0.4.

    Guru Team Site Chat on Telegram