Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Patreon Wordpress HIGH 8.8
CVE-2023-41129

Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress.This issue affects Patreon WordPress: from n/a through 1.8.6.

Fix: after 1.8.6
Fix from $1,950 2023-11-18
Flutter Downloader CRITICAL 9.1
CVE-2023-41387

A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary fi…

Fix: 1.11.2+
Fix from $2,300 2023-09-19
Patreon Wordpress MEDIUM 5.5
CVE-2021-25026

The Patreon WordPress plugin before 1.8.2 does not sanitise and escape the field "Custom Patreon Page name", which could allow high privilege users t…

Fix: 1.8.2+
Fix from $1,600 2022-03-14
Patreon Wordpress CRITICAL 9.6
CVE-2021-24228

The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPress login…

Fix: 1.7.2+
Fix from $2,300 2021-04-12
Patreon Wordpress CRITICAL 9.6
CVE-2021-24229

The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the Patreon WordPress …

Fix: 1.7.2+
Fix from $2,300 2021-04-12
Patreon Wordpress HIGH 8.1
CVE-2021-24230

The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make …

Fix: 1.7.0+
Fix from $1,950 2021-04-12
Patreon Wordpress MEDIUM 6.5
CVE-2021-24231

The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make …

Fix: 1.7.0+
Fix from $1,600 2021-04-12
Patreon Wordpress HIGH 7.5
CVE-2021-24227EPSS 6%

The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone vi…

Fix: 1.7.0+
Fix from $1,950 2021-04-12
Patreon Wordpress CRITICAL 9.8
CVE-2018-20984

The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.

Fix: 1.2.2+
Fix from $2,300 2019-08-22