Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Patreon WordPress 1.7.0 Clear all filters
TI-2021-06523 CVE-2021-24231 · GHSA-hhg9-2j57-c5cj

Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon

Priority LOW 30

The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Patreon by visiting a s…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00575 Published 2021-04-12 Fixed in 1.7.0 CWE-352
TI-2021-06522 CVE-2021-24230 · GHSA-9pr2-6qr7-7436

Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta

Priority LOW 36

The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged in user overwrite or create arbitrary user metadata on the vic…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00598 Published 2021-04-12 Fixed in 1.7.0 CWE-352
TI-2021-06519 CVE-2021-24227 · GHSA-cc3j-r9g7-4r8c

Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure

Priority MEDIUM 42

The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.06755 Published 2021-04-12 Fixed in 1.7.0 CWE-200