<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: red discord bot</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-15278: Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module</title><link>https://patchthecve.com/cve/CVE-2020-15278.html</link><guid>https://patchthecve.com/cve/CVE-2020-15278.html</guid><pubDate>Wed, 17 Jun 2026 02:56:24 +0000</pubDate><description>HIGH 7.7: Red Discord Bot before version 3.4.1 has an unauthorized privilege escalation exploit in the Mod module. This exploit allows Discord users with a high privilege level within the guild to bypass hierarchy checks when the application is in a specific condition that is beyond that user&#x27;s control. By ab</description></item><item><title>CVE-2020-15147: Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module</title><link>https://patchthecve.com/cve/CVE-2020-15147.html</link><guid>https://patchthecve.com/cve/CVE-2020-15147.html</guid><pubDate>Wed, 17 Jun 2026 02:56:08 +0000</pubDate><description>HIGH 8.5: Red Discord Bot before versions 3.3.12 and 3.4 has a Remote Code Execution vulnerability in the Streams module. This exploit allows Discord users with specifically crafted &quot;going live&quot; messages to inject code into the Streams module&#x27;s going live message. By abusing this exploit, it&#x27;s possible to per</description></item><item><title>CVE-2020-15140: In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit</title><link>https://patchthecve.com/cve/CVE-2020-15140.html</link><guid>https://patchthecve.com/cve/CVE-2020-15140.html</guid><pubDate>Wed, 17 Jun 2026 02:56:07 +0000</pubDate><description>HIGH 8.2: In Red Discord Bot before version 3.3.11, a RCE exploit has been discovered in the Trivia module: this exploit allows Discord users with specifically crafted usernames to inject code into the Trivia module&#x27;s leaderboard command. By abusing this exploit, it&#x27;s possible to perform destructive actions a</description></item></channel></rss>