Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: rainafarai Clear all filters
TI-2026-06703 CVE-2026-7620 · GHSA-76px-9qj6-wjpg

Missing authorization in rainafarai Notification for Telegram

Priority LOW 21

The Notification for Telegram plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.5.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00473 Published 2026-07-11 No fix listed CWE-862
TI-2025-39141 CVE-2025-62993 · GHSA-x6m4-6v4m-3v9r

WordPress Notification for Telegram plugin <= 3.5.1 - Broken Access Control vulnerability

Priority LOW 19

Missing Authorization vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notification for Telegram:…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2025-12-09 No fix listed CWE-862
TI-2025-36447 CVE-2025-58794 · GHSA-p32q-jmfh-pfg7

WordPress Notification for Telegram plugin <= 3.5 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in rainafarai Notification for Telegram notification-for-telegram allows Cross Site Request Forgery.This issue affects Notification for Telegram: from n/a through <= 3.5.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0014 Published 2025-09-05 No fix listed CWE-352