CVE ID :CVE-2026-109516 Published : Oct. 29, 2026, 3:39 a.m. | 45 minutes ago Description :The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0. The...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-109516 - Bot for Telegram on WooCommerce <= 1.3.0 - Unauthenticated Authentication Bypass to Account Takeover via Fake Telegram Webhook + Brute-Forced Login Token

VERWANDTEARTIKEL

CVE-2026-96228 - SSL Wireless SMS Notification <= 3.8.1 - Unauthenticated Authentication Bypass to Account Takeover

CVE-2026-42922 - FUXA Authorization Bypass and Remote Code Execution

CVE-2026-113387 - Ortto WordPress Plugin Unauthenticated Configuration Injection Vulnerability

CVE-2026-66088 - Unrestricted Command Execution via system.execute

CVE-2026-21157 - Bixby Improper Input Validation Vulnerability

CVE-2026-85749 - MailWatch: IDOR lets any authenticated user release or delete another tenant's quarantined mail