CVE-2025-5939

The Telegram for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions...

CVE-2025-5939

creationtimestamp| type| source ---|---|--- 2025-06-13 02:34:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18247 2025-06-13 05:35:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrhppqmure2s...

CVE-2025-5939 Telegram for WP <= 1.6.1 - Authenticated (Admin+) Stored Cross-Site Scripting

The Telegram for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions...

CVE-2025-5939

The Telegram for WP WordPress plugin is affected by a Stored Cross-Site Scripting (XSS) vulnerability in admin settings, present in all versions up to and including 1.6.1. The issue stems from insufficient input sanitization and output escaping, enabling an attacker with administrator-level permi...