Vulnerabilities / Patreon WordPress
Patreon WordPress vulnerabilities
Advisories WPSec published for Patreon WordPress. Other sources may list more. Its attack surface: Patreon WordPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0680 | Patreon WordPress <= 1.9.17 - Cross-Site Request Forgery to Account Takeover via OAuth Callback | High 8.1 | 1.10.0 |
| 2026-10-08 | WPSEC-2026-0679 | Patreon WordPress <= 1.9.17 - Unauthenticated Open Redirect via 'final_redirect_uri' State Parameter | Medium 4.7 | 1.10.0 |
License: CC BY 4.0