| CVE-2026-92432 |
The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting,…
|
4.3
Moyenne
|
17 oct. 2026 |
| CVE-2026-92431 |
The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality,…
|
3.7
Faible
|
17 oct. 2026 |
| CVE-2026-92433 |
The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account,…
|
6.5
Moyenne
|
17 oct. 2026 |
| CVE-2021-25026 |
The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could…
|
Non notée
|
14 mars 2022 |
| CVE-2021-24231 |
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before…
|
Non notée
|
12 avr. 2021 |
| CVE-2021-24230 |
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before…
|
Non notée
|
12 avr. 2021 |
| CVE-2021-24229 |
The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX…
|
Non notée
|
12 avr. 2021 |
| CVE-2021-24228 |
The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin…
|
Non notée
|
12 avr. 2021 |
| CVE-2021-24227 |
The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that…
|
Non notée
|
12 avr. 2021 |