CVEvulnerability

CVE-2026-92431

3.7 LOW Published 2026-10-17 Modified 2026-10-19 Official page ↗
Status
Deferred
Published
2026-10-17
Last modified
2026-10-19
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-862

Description

The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.

Related

Weakness · CWE (1)

  • CWE-862 Missing Authorization weakness

References