Exploit for CVE-2024-9821

🗓️ 11 Oct 2024 15:35:39Reported by RandomRobbieBFType

WordPress plugin Bot for Telegram on WooCommerce <=1.2.4 leaks bot token to authenticated subscribers via AJAX, enabling account takeover.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-9821	12 Oct 202406:06	–	circl
CNNVD	WordPress plugin Bot for Telegram on WooCommerce 信息泄露漏洞	12 Oct 202400:00	–	cnnvd
CVE	CVE-2024-9821	12 Oct 202402:05	–	cve
Cvelist	CVE-2024-9821 Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass	12 Oct 202402:05	–	cvelist
NVD	CVE-2024-9821	12 Oct 202403:15	–	nvd
Patchstack	WordPress Bot for Telegram on WooCommerce plugin <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass vulnerability	11 Oct 202413:21	–	patchstack
Patchstack	WordPress Bot for Telegram on WooCommerce Plugin <= 1.2.4 is vulnerable to Sensitive Data Exposure	11 Oct 202400:00	–	patchstack
Positive Technologies	PT-2024-39866 · WordPress · The Bot For Telegram On Woocommerce	12 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-9821	5 Feb 202504:21	–	redhatcve
Vulnrichment	CVE-2024-9821 Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass	12 Oct 202402:05	–	vulnrichment

18 Oct 2024 17:57Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

EPSS0.47614

SSVC