plugin
2 known security issues reported for the Telsender WordPress plugin. Most recent disclosed Jan 27, 2026.
Running Telsender on your site? Check whether your installed version is affected.
Scan your site freeThe TelSender plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting in all versions up to, and including, 1.14.14. This is due to insufficient input sanitization when processing Telegram API responses containing attacker-controlled chat titles. This makes it possible for unauthenticated attackers to inje...
The TelSender plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tscfwc_form_ajax_reqest() function hooked via an AJAX action in versions up to, and including, 1.14.11. This makes it possible for authenticated attackers, with subscriber-level access and abov...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free