TelSender – Wp to telegram СF 7, Events, Wpforms, Ninja forms, Wooccommerce, 7d9d8268f23f57867d0b85ff74fa4663e9384959

CVE, Research URL: 7d9d8268f23f57867d0b85ff74fa4663e9384959
Home page URL: Security reports for TelSender – Wp to telegram СF 7, Events, Wpforms, Ninja forms, Wooccommerce
Application: TelSender – Wp to telegram СF 7, Events, Wpforms, Ninja forms, Wooccommerce
Published on: Sep 04, 2023
Research Description: TelSender – Wp to telegram СF 7, Events, Wpforms, Ninja forms, Wooccommerce [telsender] < 1.14.12 WordPress TelSender Plugin <= 1.14.7 is vulnerable to Broken Access Control No patched version is available. No reply from the vendor. Abdi Pranata discovered and reported this Broken Access Control vulnerability in WordPress TelSender Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.
Affected versions: max 1.14.12.
Status: vulnerable

TelSender &#8211; Wp to telegram СF 7, Events, Wpforms, Ninja forms, Wooccommerce, 7d9d8268f23f57867d0b85ff74fa4663e9384959