Patreon Wordpress (Unknown) - vulnerabilities (CVEs)
9 CVEs, 3 in the last 30 days, 1 known versions, newest CVE from 2026-10-17. Vendor: Unknown.
CVEs of Patreon Wordpress
- CVE-2026-92432 - CVSS 4.3 (medium), 2026-10-17: The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to…
- CVE-2026-92433 - CVSS 6.5 (medium), 2026-10-17: The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in…
- CVE-2026-92431 - CVSS 3.7 (low), 2026-10-17: The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate…
- CVE-2021-25026 - CVSS 5.5 (medium), 2022-03-14: The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could allow high privilege users to perform…
- CVE-2021-24228 - CVSS 9.6 (critical), 2021-04-12: The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPress login form…
- CVE-2021-24231 - CVSS 6.5 (medium), 2021-04-12: The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged…
- CVE-2021-24230 - CVSS 8.1 (high), 2021-04-12: The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged…
- CVE-2021-24229 - CVSS 9.6 (critical), 2021-04-12: The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the Patreon WordPress plugin…
- CVE-2021-24227 - CVSS 7.5 (high), 2021-04-12: The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting…
