3.7
Faible
CVE-2026-92431 The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality,…
Description
The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Patreon WordPress 1.10 | premières → < 1.10.0 | 1.10.0 |
Autres CVE de Patreon WordPress
Les 9 CVE de Patreon WordPress →
CVE-2026-92432
The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting,…
4.3
Moyenne
CVE-2026-92433
The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account,…
6.5
Moyenne
CVE-2021-25026
The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could…
Non notée
CVE-2021-24231
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before…
Non notée