WordPress Notification for Telegram plugin <= 3.5.1 - Missing Authorization to Authenticated (Subscriber+) Cron Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Cron Modification vulnerability discovered by Pattama Tangpoonponwiwat Kwan in WordPress Plugin Notification for Telegram versions = 3.5.1...

EUVD-2024-50090

Malicious code in bioql PyPI...

WordPress Telegram Bot & Channel Plugin <= 3.8.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Telegram Bot & Channel Type Plugin Vulnerable versions = 3.8.2 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Cross Site Request Forgery CSRF CVE CVE-2024-38789 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5f0687129e4e Credits Majed Refaea Require...