guruteam
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Bot for Telegram on WooCommerce | 2 | – | Oct 29, 2026 |
Exploited and recent CVEs
- CVE-2026-109516 Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token 0.6%
- CVE-2024-9821 Bot for Telegram on WooCommerce <= 1.2.7 - Authenticated (Subscriber+) Telegram Bot Token Disclosure to Authentication Bypass 1.2%