Browse CVEs

HIGH 8.8 CVE-2023-41129 Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6. Patreon Wordpress after 1.8.6 Fix from $1,9502023-11-18 CRITICAL 9.1 CVE-2023-41387 A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary fi… Flutter Downloader 1.11.2+ Fix from $2,3002023-09-19 MEDIUM 5.5 CVE-2021-25026 The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could allow high privilege users t… Patreon Wordpress 1.8.2+ Fix from $1,6002022-03-14 CRITICAL 9.6 CVE-2021-24228 The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPress login… Patreon Wordpress 1.7.2+ Fix from $2,3002021-04-12 CRITICAL 9.6 CVE-2021-24229 The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the Patreon WordPress … Patreon Wordpress 1.7.2+ Fix from $2,3002021-04-12 HIGH 8.1 CVE-2021-24230 The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make … Patreon Wordpress 1.7.0+ Fix from $1,9502021-04-12 MEDIUM 6.5 CVE-2021-24231 The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make … Patreon Wordpress 1.7.0+ Fix from $1,6002021-04-12 HIGH 7.5 CVE-2021-24227EPSS 6% The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone vi… Patreon Wordpress 1.7.0+ Fix from $1,9502021-04-12 CRITICAL 9.8 CVE-2018-20984 The patreon-connect plugin before 1.2.2 for WordPress has Object Injection. Patreon Wordpress 1.2.2+ Fix from $2,3002019-08-22