cleantalk
Vulnerabilities and Security Researches

Bot for Telegram on WooCommerce, CVE-2025-48268

CVE, Research URL

CVE-2025-48268

Home page URL

Security reports for Bot for Telegram on WooCommerce

Application

Bot for Telegram on WooCommerce

Published on
May 19, 2025
Research Description
Missing Authorization vulnerability in Guru Team Bot for Telegram on WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Bot for Telegram on WooCommerce: from n/a through 1.2.6.
Affected versions
Min -, max 1.2.7.
Status
vulnerable
Previous vulnerability researches
WP SMTP (CVE-2024-1789) , Jun 07, 2024
WP SMTP (CVE-2025-1123) , May 24, 2025
Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin (CVE-2022-42699) , Jun 07, 2024
Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin (CVE-2019-25141) , Jun 07, 2024
Easy WP SMTP by SendLayer – WordPress SMTP and Email Log Plugin (CVE-2020-35234) , Jun 07, 2024
New vulnerability
miniOrange Discord Integration (CVE-2025-47672) , May 25, 2025
4stats (CVE-2025-3869) , May 24, 2025
Verge3D Publishing and E-Commerce (CVE-2025-48241) , May 24, 2025
Staggs – Product configurator for WooCommerce (CVE-2025-47637) , May 24, 2025
Additional Custom Emails for WooCommerce (CVE-2025-48251) , May 24, 2025