cleantalk
Vulnerabilities and Security Researches

Bot for Telegram on WooCommerce, CVE-2025-48268

CVE, Research URL

CVE-2025-48268

Home page URL

Security reports for Bot for Telegram on WooCommerce

Application

Bot for Telegram on WooCommerce

Published on
May 19, 2025
Research Description
Missing Authorization vulnerability in Guru Team Bot for Telegram on WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bot for Telegram on WooCommerce: from n/a through 1.2.6.
Affected versions
Min -, max 1.2.7.
Status
vulnerable
Previous vulnerability researches
Cloudflare Turnstile or reCAPTCHA For All Pages, to Block Spam and Hackers Attack, Block Visitors from China (CVE-2025-48243) , May 21, 2025
Cloudflare Turnstile or reCAPTCHA For All Pages, to Block Spam and Hackers Attack, Block Visitors from China (CVE-2023-32599) , Jun 10, 2024
Cloudflare Turnstile or reCAPTCHA For All Pages, to Block Spam and Hackers Attack, Block Visitors from China (6e39913b14e05ccec85584f5eddcdf946239ae21) , Jun 06, 2024
Cloudflare Turnstile or reCAPTCHA For All Pages, to Block Spam and Hackers Attack, Block Visitors from China (CVE-2025-30862) , Apr 02, 2025
New vulnerability
Additional Custom Emails for WooCommerce (CVE-2025-48251) , May 24, 2025
WP SMTP (CVE-2025-1123) , May 24, 2025
Bot for Telegram on WooCommerce (CVE-2025-48268) , May 24, 2025
WP Image Mask (CVE-2025-48235) , May 23, 2025
TablePress – Tables in WordPress made easy (CVE-2025-5096) , May 23, 2025