bot_for_telegram_on_woocommerce vulnerabilities

CVEs whose affected-version data names the bot_for_telegram_on_woocommerce package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109516Critical· 9.8

1w ago

Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token

The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0. The `/wp-json/woo-telegram/v1/main/` REST endpoint is registered wit…

▾ Midnightguruteam · Bot for Telegram on WooCommerceEPSS 0.57%via CVEORG