CVE-2026-92431
CVE-2026-92431 · Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.
CVSS 3.7 · Low · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
patreon wordpress
- Versions
- ≥ 0, < 1.10.0: Affected (semver)
Update to 1.10.0