Skip to content
OpenAdvisories

Vendor

Guru Team

4 known vulnerabilities.

Products

Bot for Telegram on WooCommerce 3 Site Chat on Telegram 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-9821 Public exploit

    Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass

    The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stm_wpcfto_get_settings' AJAX action in all versions up to, and including, 1.2.7. This makes it possible for…

    Guru Team Bot for Telegram on WooCommerce Web / CMS