Advisories · Technology

Patreon WordPress.

Every CVE that names Patreon WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92432 CVE record

CVSS 4.3 Medium

Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter
- Patreon WordPress
- Open redirect
Not analysed yet 17 Oct 2026
CVE-2026-92431 CVE record

CVSS 3.7 Low

Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration
- Patreon WordPress
- Broken access control
Not analysed yet 17 Oct 2026
CVE-2026-92433 CVE record

CVSS 6.5 Medium

Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF
- Patreon WordPress
- Cross-site request forgery (CSRF)
Not analysed yet 17 Oct 2026
CVE-2026-108479 CVE record

CVSS 8.1 High

WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CSRF) vulnerability
- Patreon WordPress
- Cross-site request forgery (CSRF)
Not analysed yet 12 Oct 2026
CVE-2026-108481 CVE record

CVSS 7.4 High

WordPress Patreon WordPress plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability
- Patreon WordPress
- Cross-site request forgery (CSRF)
Not analysed yet 12 Oct 2026
CVE-2025-24588 CVE record

CVSS 6.5 Medium

WordPress Patreon WordPress plugin <= 1.9.1 - Broken Access Control vulnerability
- Patreon WordPress
- Broken access control
Not analysed yet 24 Jan 2025
CVE-2024-37430 CVE record

CVSS 5.3 Medium

WordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerability
- Patreon WordPress
- Authentication bypass
Not analysed yet 9 Jul 2024
CVE-2023-41129 CVE record

CVSS 4.3 Medium

WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)
- Patreon WordPress
- Cross-site request forgery (CSRF)
Not analysed yet 18 Nov 2023
CVE-2021-25026 CVE record

Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scripting
- Patreon WordPress
- Cross-site scripting (XSS)
Not analysed yet 14 Mar 2022
CVE-2021-24231 CVE record

Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon
- Patreon WordPress
- Cross-site request forgery (CSRF)
Not analysed yet 12 Apr 2021
CVE-2021-24230 CVE record

Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta
- Patreon WordPress
- Cross-site request forgery (CSRF)
Not analysed yet 12 Apr 2021
CVE-2021-24229 CVE record

Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action
- Patreon WordPress
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2021
CVE-2021-24228 CVE record

Patreon WordPress < 1.7.2 - Reflected XSS on Login Form
- Patreon WordPress
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2021
CVE-2021-24227 CVE record

Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure
- Patreon WordPress
- Information disclosure
Not analysed yet 12 Apr 2021