Skip to content
OpenAdvisories

Vendor

wpsolution

2 known vulnerabilities.

Products

WPS Telegram Chat 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2024-9628

    WPS Telegram Chat <= 4.6.0 - Authenticated (Subscriber+) Unauthorized Access to Telegram Bot API

    The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'Wps_Telegram_Chat_Admin::checkСonnection' function in versions up to, and including, 4.6.0. This makes it …

    wpsolution WPS Telegram Chat Web / CMS
  • Medium 5.4
    CVE-2024-9630

    WPS Telegram Chat <= 4.6.0 - Missing Authorization to Information Exposure

    The WPS Telegram Chat plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when accessing messages in versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to view the messages that …

    wpsolution WPS Telegram Chat Web / CMS