CVE-2024-9630

MEDIUM 5.3CVE-2024-9630 · Published 25/10/2024 · updated 17/06/2026

In short

CVE-2024-9630 is a MEDIUM (CVSS 5.3) vulnerability affecting wps telegram chat (10web).
Chance of exploitation in the next 30 days (EPSS): 0.27%, higher than 19.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wps telegram chat 10web	`≤ 4.5.4`	No fix yet

Description

The WPS Telegram Chat plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when accessing messages in versions up to, and including, 4.6.0. This makes it possible for unauthenticated attackers to view the messages that are sent through the Telegram Bot API.

References

plugins.trac.wordpress.org/browser/wps-telegram-chat/tags/4.5.4/public/partials/wps-telegram-chat-public-handler.php · Broken Link
wordfence.com/threat-intel/vulnerabilities/id/86b9b17f-f819-4316-8565-4e7603cd5de7 · Third Party Advisory

More vulnerabilities in wps telegram chat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free