What’s Vulnerable › Products

Patreon WordPress vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Patreon WordPress version is affected

Latest Patreon WordPress vulnerabilities

• CVE-2026-92433 — Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF (CVSS 6.5)
• CVE-2026-92432 — Patreon WordPress < 1.10.0 - Open Redirect via 'state' Parameter (CVSS 4.3)
• CVE-2026-92431 — Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration (CVSS 3.7)
• CVE-2026-108481 — WordPress Patreon WordPress plugin <= 1.10.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 7.4)
• CVE-2026-108479 — WordPress Patreon WordPress plugin <= 1.9.17 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 8.1)
• CVE-2025-24588 — WordPress Patreon WordPress plugin <= 1.9.1 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2024-37430 — WordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerability (CVSS 5.3)
• CVE-2023-41129 — WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)
• CVE-2021-25026 — Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scripting (CVSS 5.5)
• CVE-2021-24231 — Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon (CVSS 6.5)
• CVE-2021-24230 — Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta (CVSS 8.1)
• CVE-2021-24229 — Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action (CVSS 9.6)
• CVE-2021-24228 — Patreon WordPress < 1.7.2 - Reflected XSS on Login Form (CVSS 9.6)
• CVE-2021-24227 — Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure (CVSS 7.5)
• CVE-2018-20984 — (CVSS 9.8)