Patreon Wordpress
Approved changes feed: RSS · Atom
cpe:2.3:a:patreon:patreon_wordpress:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Patreon (9d932852-961e-5780-b5ef-ea52af9a99dd) |
|---|---|
| Product | Patreon Wordpress (3180eeba-a0fe-5be0-8639-b852032f5007) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-37430 |
vulnerable | 2026-06-08 06:39:47.556492 |
WordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerability
MEDIUM (5.3)
Authentication Bypass by Spoofing vulnerability in patreon Patreon WordPress patreon-connect.This issue affects Patreon WordPress: from n/a through <= 1.9.0.
Published: 2024-07-09T10:36:20.343Z
Updated: 2026-04-28T16:09:58.698Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-41129 |
vulnerable | 2026-06-08 06:11:05.378182 |
WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6.
Published: 2023-11-18T22:16:15.050Z
Updated: 2026-04-28T16:08:37.298Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-25026 |
vulnerable | 2026-06-08 05:30:39.823786 |
Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scripting
The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Published: 2022-03-14T14:41:16.000Z
Updated: 2024-08-03T19:49:14.659Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24231 |
vulnerable | 2026-06-08 05:30:04.024485 |
Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Patreon by visiting a specially crafted link.
Published: 2021-04-12T14:06:31.000Z
Updated: 2024-08-03T19:21:18.660Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24230 |
vulnerable | 2026-06-08 05:30:04.024168 |
Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged in user overwrite or create arbitrary user metadata on the victim’s account once visited. If exploited, this bug can be used to overwrite the “wp_capabilities” meta, which contains the affected user account’s roles and privileges. Doing this would essentially lock them out of the site, blocking them from accessing paid content.
Published: 2021-04-12T14:06:16.000Z
Updated: 2024-08-03T19:21:18.743Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24229 |
vulnerable | 2026-06-08 05:30:04.023830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24228 |
vulnerable | 2026-06-08 05:30:04.023465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24227 |
vulnerable | 2026-06-08 05:30:04.022906 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20984 |
vulnerable | 2026-06-08 05:11:28.274788 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.