Skip to content
Noroxi

Patreon records

10 published records for vendor patreon.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
10%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2018-20984
    40Plan

    The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.

    CriticalCVSS 9.8No exploitEPSS 2%

    patreon · patreon wordpressAug 22, 2019

  • CVE-2021-24228
    39Monitor

    Patreon WordPress < 1.7.2 - Reflected XSS on Login Form

    CriticalCVSS 9.6No exploitEPSS 1%

    patreon · patreon wordpressApr 12, 2021

  • CVE-2021-24229
    39Monitor

    Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action

    CriticalCVSS 9.6No exploitEPSS 1%

    patreon · patreon wordpressApr 12, 2021

  • CVE-2023-41387
    36Monitor

    A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arb

    CriticalCVSS 9.1No exploitEPSS 0%

    patreon · flutter downloaderSep 19, 2023

  • CVE-2023-41129
    35Monitor

    WordPress Patreon WordPress Plugin <= 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    patreon · patreon wordpressNov 18, 2023

  • CVE-2021-24227
    32Monitor

    Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure

    HighCVSS 7.5Proof of conceptEPSS 5%

    patreon · patreon wordpressApr 12, 2021

  • CVE-2021-24230
    32Monitor

    Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta

    HighCVSS 8.1No exploitEPSS 0%

    patreon · patreon wordpressApr 12, 2021

  • CVE-2021-24231
    26Monitor

    Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon

    MediumCVSS 6.5No exploitEPSS 0%

    patreon · patreon wordpressApr 12, 2021

  • CVE-2021-25026
    22Monitor

    Patreon WordPress < 1.8.2 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 5.5No exploitEPSS 0%

    patreon · patreon wordpressMar 14, 2022

  • CVE-2024-37430
    21Monitor

    WordPress Patreon WordPress plugin <= 1.9.0 - Image Protection Bypass vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    patreon · patreon wordpressJul 9, 2024