Export limit exceeded: 425803 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2026-92433

Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF

The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request (CSRF), taking over the site's Patreon integration.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Patreon Wordpress-extensions
Products
Patreon Wordpress Patreon Wordpress
CVE-2026-92431

Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration

The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.

CVSS 3.1 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Patreon Wordpress-extensions
Products
Patreon Wordpress Patreon Wordpress
CVE-2026-92432

Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter

The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL through a crafted link, which is useful for phishing.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Patreon Wordpress-extensions
Products
Patreon Wordpress Patreon Wordpress