Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Guru Team Clear all filters
TI-2026-82280 CVE-2026-109516 · GHSA-cw4f-j2mf-3wm9

Authentication bypass in Bot for Telegram on WooCommerce

Priority MEDIUM 50

The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00575 Published 2026-10-29 No fix listed CWE-287
TI-2025-30594 CVE-2025-48268 · GHSA-jfgc-xwhp-r9rr

WordPress Bot for Telegram on WooCommerce plugin <= 1.2.6 - Broken Access Control Vulnerability

Priority LOW 20

Missing Authorization vulnerability in Guru Team Bot for Telegram on WooCommerce bot-for-telegram-on-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bot for Telegram…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00243 Published 2025-05-19 No fix listed CWE-862
TI-2024-09114 CVE-2024-9821 · GHSA-cfvh-mr6h-3g8q

Information disclosure in Guru Team Bot for Telegram on WooCommerce

Priority MEDIUM 42

The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stm_wpcfto_get_settings' AJAX action in all versions up to, and inclu…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01152 Published 2024-10-12 No fix listed CWE-200