Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Patreon WordPress 1.10.0 Clear all filters
TI-2026-75548 CVE-2026-92432 · GHSA-8hhj-377x-qmw2

Open redirect in Patreon WordPress plugin via state parameter

Priority LOW 19

The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL through a crafted…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00164 Published 2026-10-17 Fixed in 1.10.0 CWE-601
TI-2026-75547 CVE-2026-92431 · GHSA-vv83-mghr-rv2c

Missing authorization in Patreon WordPress exposes taxonomy term names

Priority LOW 17

The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxono…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.0017 Published 2026-10-17 Fixed in 1.10.0 CWE-862
TI-2026-75549 CVE-2026-92433 · GHSA-w3q2-34vh-jqmw

Patreon WordPress plugin lets attackers hijack Patreon integration via CSRF

Priority LOW 28

The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled acc…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00136 Published 2026-10-17 Fixed in 1.10.0 CWE-352