low3.7
CVE-2026-92431
The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate th…
Impact
The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.
Affected products
| Product | Affected versions |
|---|---|
| Patreon WordPress Plugin | before 1.10.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.