Read the docs

Guru Team

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Guru Team records in CISA KEV

No Guru Team vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-82280 CVE-2026-109516 · GHSA-cw4f-j2mf-3wm9

Authentication bypass in Bot for Telegram on WooCommerce

Priority MEDIUM 50

The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00575 Published 2026-10-29 No fix listed CWE-287
TI-2024-09114 CVE-2024-9821 · GHSA-cfvh-mr6h-3g8q

Information disclosure in Guru Team Bot for Telegram on WooCommerce

Priority MEDIUM 42

The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stm_wpcfto_get_settings' AJAX action in all versions up to, and inclu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01152 Published 2024-10-12 No fix listed CWE-200
TI-2025-30594 CVE-2025-48268 · GHSA-jfgc-xwhp-r9rr

WordPress Bot for Telegram on WooCommerce plugin <= 1.2.6 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in Guru Team Bot for Telegram on WooCommerce bot-for-telegram-on-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bot for Telegram…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00243 Published 2025-05-19 No fix listed CWE-862
Open these records in search →