Patreon WordPress
Patreon WordPress Security Releases - October 2026
patreon-wordpress-2026-10 Oct 1, 2026 Source: Vendor
Patreon WordPress security advisories for October 2026, compiled from CVE.org records.
Source of record
The credited names below are quoted verbatim from the vendor's own advisory:
https://www.cve.org/CVERecord?id=CVE-2026-92431
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.
Credited
3 lines
Showing 1–3 of 3 matching , clear filters
CVE-2026-92431
BR2026-0000-037131
Patreon WordPress
unclaimed
The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, incl...
Credited as JunHee CHO
CVE-2026-92432
BR2026-0000-037132
Patreon WordPress
unclaimed
The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary externa...
Credited as Mike Gozdiskowski
CVE-2026-92433
BR2026-0000-037133
Patreon WordPress
unclaimed
The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an ...
Credited as JunHee CHO