Patreon vulnerabilities

Products

• Wordpress 14
• Wordpress 9

Newest

• patreon wordpress, unknown patreon wordpress +1 more Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter CVE-2026-92432 4.3 MediumOctober 17, 2026
• patreon wordpress, unknown patreon wordpress +1 more Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF CVE-2026-92433 6.5 MediumOctober 17, 2026
• patreon wordpress, unknown patreon wordpress +1 more Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration CVE-2026-92431 3.7 LowOctober 17, 2026
• patreon wordpress WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-108479 8.1 HighOctober 12, 2026
• patreon wordpress WordPress Patreon WordPress plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-108481 7.4 HighOctober 12, 2026
• patreon wordpress WordPress Patreon WordPress plugin <= 1.9.1 - Broken Access Control vulnerability CVE-2025-24588 6.5 MediumJanuary 24, 2025
• patreon wordpress WordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerability CVE-2024-37430 5.3 MediumJuly 9, 2024
• patreon wordpress WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-41129 4.3 MediumNovember 18, 2023
• patreon flutter downloader A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote... CVE-2023-41387 9.1 CriticalSeptember 19, 2023
• patreon wordpress, unknown patreon wordpress +1 more Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scripting CVE-2021-25026 5.5 MediumMarch 14, 2022
• patreon wordpress, unknown patreon wordpress +1 more Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon CVE-2021-24231 6.5 MediumApril 12, 2021
• patreon wordpress, unknown patreon wordpress +1 more Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta CVE-2021-24230 8.1 HighApril 12, 2021
• patreon wordpress, unknown patreon wordpress +1 more Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action CVE-2021-24229 9.6 CriticalApril 12, 2021
• patreon wordpress, unknown patreon wordpress +1 more Patreon WordPress < 1.7.2 - Reflected XSS on Login Form CVE-2021-24228 9.6 CriticalApril 12, 2021
• patreon wordpress, unknown patreon wordpress +1 more Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure CVE-2021-24227 7.5 HighApril 12, 2021
• patreon wordpress The patreon-connect plugin before 1.2.2 for WordPress has Object Injection. CVE-2018-20984 9.8 CriticalAugust 22, 2019