Cpe:2.3:a:bot_for_telegram_on_woocommerce_project:bot_for_telegram_on_woocommerce:*:*:*:*:*:wordpress:*:*

The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to unauthenticated account takeover due to missing permission checks and signature validation in its REST API and authentication endpoints.