10web WPS Telegram Chat vulnerabilities

2 CVEs affecting 10web WPS Telegram Chat, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-9630, published 2024-10-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-9628, published 2024-10-25. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. The WPS Telegram Chat plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'Wps_Telegram_Chat_Admin::checkСonnection'…
CVE-2024-9630, published 2024-10-25. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. The WPS Telegram Chat plugin for WordPress is vulnerable to authorization bypass due to a missing capability check when accessing messages in versions up to, and including, 4.6.0. This makes it…