VendorsPatreonpatreon_wordpressany version
Vulnerabilities

Patreon WordPress any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2018-20984
The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.
Published 2019-08-22 · Modified
9.8EPSS 0.020
CVE-2021-24228
Patreon WordPress < 1.7.2 - Reflected XSS on Login Form
Published 2021-04-12 · Modified
9.6EPSS 0.019
CVE-2021-24229
Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action
Published 2021-04-12 · Modified
9.6EPSS 0.018
CVE-2023-41129
WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-11-18 · Modified
8.8EPSS 0.003
CVE-2021-24230
Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta
Published 2021-04-12 · Modified
8.1EPSS 0.006
CVE-2021-24227
Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure
Published 2021-04-12 · Modified
7.5EPSS 0.059
CVE-2021-24231
Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon
Published 2021-04-12 · Modified
6.5EPSS 0.006
CVE-2021-25026
Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scripting
Published 2022-03-14 · Modified
5.5EPSS 0.007