All 3 CVE vulnerabilities found in Bot for Telegram on WooCommerce, with AI-generated Chinese analysis, references, and POCs.
Vendor: guruteam
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-109516 | Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token CWE-287 | 9.8 | Critical | 2026-10-29 |
| CVE-2025-48268 | WordPress Bot for Telegram on WooCommerce plugin <= 1.2.6 - Broken Access Control Vulnerability CWE-862 | 4.3 | Medium | 2025-05-19 |
| CVE-2024-9821 | Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass CWE-200 | 8.8 | High | 2024-10-12 |
All 3 known CVE vulnerabilities affecting Bot for Telegram on WooCommerce with full Chinese analysis, references, and POCs where available.