← Back to CVE List

CVE-2024-9627

Published: 2024-10-22T07:15Z
Last Modified: 2024-10-25T21:19Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The TeploBot - Telegram Bot for WP plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'service_process' function in all versions up to, and including, 1.3. This makes it possible for unauthenticated attackers to view the Telegram Bot Token, which is a secret token to control the bot. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt