| CVE-2026-92432 |
The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting,…
|
4.3
Medium
|
Oct 17, 2026 |
| CVE-2026-92431 |
The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality,…
|
3.7
Low
|
Oct 17, 2026 |
| CVE-2026-92433 |
The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account,…
|
6.5
Medium
|
Oct 17, 2026 |
| CVE-2021-25026 |
The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could…
|
Not rated
|
Mar 14, 2022 |
| CVE-2021-24231 |
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before…
|
Not rated
|
Apr 12, 2021 |
| CVE-2021-24230 |
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before…
|
Not rated
|
Apr 12, 2021 |
| CVE-2021-24229 |
The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX…
|
Not rated
|
Apr 12, 2021 |
| CVE-2021-24228 |
The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin…
|
Not rated
|
Apr 12, 2021 |
| CVE-2021-24227 |
The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that…
|
Not rated
|
Apr 12, 2021 |