87537 matches found
CVE-2025-46446
creationtimestamp| type| source ---|---|--- 2025-05-23 14:47:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17398...
CVE-2025-46455
creationtimestamp| type| source ---|---|--- 2025-05-23 14:46:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17395...
CVE-2025-5111
creationtimestamp| type| source ---|---|--- 2025-05-23 14:46:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17394...
CVE-2025-5112
creationtimestamp| type| source ---|---|--- 2025-05-23 14:46:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17392...
CVE-2025-31913
creationtimestamp| type| source ---|---|--- 2025-05-23 13:54:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17384...
CVE-2025-39494
creationtimestamp| type| source ---|---|--- 2025-05-23 13:51:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17382...
CVE-2024-9685
The Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nftbtestaction' function in versions up to, and including, 3.3.1. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2024-43309
Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WP Socio WP Telegram Widget and Join Link allows Stored XSS.This issue affects WP Telegram Widget and Join Link: from n/a through 2.1.27...
CVE-2024-34147
Jenkins Telegram Bot Plugin 1.4.0 and earlier stores the Telegram Bot token unencrypted in its global configuration file on the Jenkins controller where it can be viewed by users with access to the Jenkins controller file system...
CVE-2024-9686
The Order Notification for Telegram plugin for WordPress is vulnerable to unauthorized test message sending due to a missing capability check on the 'nktgnfwsendtestmessage' function in versions up to, and including, 1.0.1. This makes it possible for unauthenticated attackers to send a test messa...
CVE-2024-9628
The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'WpsTelegramChatAdmin::checkСonnection' function in versions up to, and including, 4.6.0. This makes it possible for authenticated attackers, wit...
CVE-2024-9630
The WPS Telegram Chat plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when accessing messages in versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to view the messages that are sent through the Telegram Bot API...
CVE-2024-11885
The NinjaTeam Chat for Telegram plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'njtelebutton shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2024-38789
Cross-Site Request Forgery CSRF vulnerability in Marco Milesi Telegram Bot & Channel telegram-bot allows Cross Site Request Forgery.This issue affects Telegram Bot & Channel: from n/a through = 3.8.2...
CVE-2024-10390
The Elfsight Telegram Chat CC plugin for WordPress is vulnerable to unauthorized modification of data to a missing capability check on the 'updatePreferences' function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2024-9629
The Contact Form 7 + Telegram plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'wpcf7Telegram::ajax' function in versions up to, and including, 0.8.5. This makes it possible for authenticated attackers, with...
CVE-2024-33905
In Telegram WebK before 2.0.0 488, a crafted Mini Web App allows XSS via the postMessage webappopenlink event type...
CVE-2023-26818
Telegram 9.3.1 and 9.4.0 allows attackers to access restricted files, microphone ,or video recording via the DYLDINSERTLIBRARIES flag...