Guruteam vulnerabilities
We track 2 vulnerabilities in Guruteam products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 29, 2026.
2vulnerabilities
1critical
1high
0exploited
9.3average CVSS score
Latest Guruteam vulnerabilities
- 9.8 Critical severity
Bot for Telegram on WooCommerce: Improper Authentication
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 1.3.0. The `/wp-json/woo-telegram/v1/main/` REST endpoint is registered with `permission_callback
- 8.8 High severity
Bot for Telegram on WooCommerce: Exposure of Sensitive Information to an Unauthorized Actor
The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stm_wpcfto_get_settings' AJAX action in all versions up to, and including, 1.2.7. This makes it possible for