https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-20T14:28:45.397787+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-92433 fkie_cve-2026-92433 2026-10-20T14:28:45.428499+00:00

The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request (CSRF), taking over the site's Patreon integration.

 https://vulnerability.circl.lu/vuln/ghsa-w3q2-34vh-jqmw GHSA-w3q2-34vh-jqmw 2026-10-20T14:28:45.428628+00:00

The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request (CSRF), taking over the site's Patreon integration.