419 matches found
CVE-2024-9627
CVE-2024-9627 concerns the WordPress plugin “TeploBot – Telegram Bot for WP.” The vulnerability is a missing authorization check in the service_process function across all versions up to and including 1.3, allowing unauthenticated attackers to disclose the Telegram Bot Token (secret for bot contr...
WordPress TeploBot - Telegram Bot for WP plugin <= 1.3 - Telegram Bot Token Disclosure vulnerability
WordPress TeploBot - Telegram Bot for WP plugin = 1.3 - Telegram Bot Token Disclosure vulnerability discovered by István Márton in WordPress Plugin TeploBot - Telegram Bot for WP versions = 1.3...
WordPress TeploBot - Telegram Bot for WP Plugin <= 1.3 is vulnerable to Sensitive Data Exposure
Software TeploBot - Telegram Bot for WP Type Plugin Vulnerable versions = 1.3 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Sensitive Data Exposure CVE CVE-2024-9627 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID 5b587e0ba22b Credits István Márton...
CVE-2024-49334
creationtimestamp| type| source ---|---|--- 2024-10-20 10:44:10+00:00| seen| https://t.me/cvedetector/8397...
CVE-2024-9821
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stmwpcftogetsettings' AJAX action in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with...
CVE-2024-9821 Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stmwpcftogetsettings' AJAX action in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with...
CVE-2024-9821
CVE-2024-9821 : The WordPress plugin “Bot for Telegram on WooCommerce” is vulnerable to sensitive information disclosure due to missing authorization checks on the stm_wpcfto_get_settings AJAX action, affecting all versions up to 1.2.4. Authenticated attackers with subscriber-level access and abo...
CVE-2024-9821 Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stmwpcftogetsettings' AJAX action in all versions up to, and including, 1.2.7. This makes it possible for authenticated attackers, with...
PT-2024-39866 · WordPress · The Bot For Telegram On Woocommerce
Name of the Vulnerable Software and Affected Versions: The Bot for Telegram on WooCommerce plugin for WordPress versions up to, and including, 1.2.4 Description: The issue is related to sensitive information disclosure due to missing authorization checks on the 'stm wpcfto get settings' AJAX...
WordPress plugin Bot for Telegram on WooCommerce 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information...
Exploit for CVE-2024-9821
CVE-2024-9821 Bot for Telegram on WooCommerce = 1.2.4 - Au...
WordPress Bot for Telegram on WooCommerce plugin <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass vulnerability
Authenticated Subscriber+ Telegram Bot Token Disclosure to Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin Bot for Telegram on WooCommerce versions = 1.2.7...
CVE-2024-9685
The CVE-2024-9685 entry concerns the WordPress plugin Notification for Telegram. Technical details in connected sources show a missing capability check in the nftb_test_action function up to and including version 3.3.1, enabling authenticated users with subscriber-level access to send unauthorize...
CVE-2024-9685 Notification for Telegram <= 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Send Telegram Test Message
The Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nftbtestaction' function in versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2024-25702
creationtimestamp| type| source ---|---|--- 2024-10-04 21:03:26+00:00| seen| https://t.me/cvedetector/7011...
CVE-2024-9125
creationtimestamp| type| source ---|---|--- 2024-09-26 12:57:25+00:00| seen| https://t.me/cvedetector/6400...
Rage Stealer Rebranded as Angry Stealer, Now Uses Telegram Bot for Data Theft
Beware of "Angry Stealer," a new malware targeting your online accounts. This rebranded version of Rage Stealer steals…...
WordPress Telegram Bot & Channel plugin <= 3.8.2 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin Telegram Bot & Channel versions = 3.8.2...
