Vendor

pechenki

2 known vulnerabilities.

Products

TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot 1 TelSender 1

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.2

CVE-2026-15298

TelSender <= 1.14.14 - Unauthenticated Stored Cross-Site Scripting via Telegram Chat Title

The TelSender plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting in all versions up to, and including, 1.14.14. This is due to insufficient input sanitization when processing Telegram API responses containing attacker-controlled chat titles.…

pechenki TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot Web / CMS

Jul 10, 2026