CVE-2024-9627

CVE-2024-9627 concerns the WordPress plugin “TeploBot – Telegram Bot for WP.” The vulnerability is a missing authorization check in the service_process function across all versions up to and including 1.3, allowing unauthenticated attackers to disclose the Telegram Bot Token (secret for bot contr...