cleantalk
Vulnerabilities and Security Researches

Patreon WordPress, 9d55a4f0c185e98d56251ed0a25aa91a0c06468b

Application

Patreon WordPress

Published on
Mar 26, 2021
Research Description
Patreon WordPress [patreon-connect] < 1.7.0 WordPress Patreon WordPress plugin <= 1.6.9 - Cross-Site Request Forgery (CSRF) vulnerability allowing overwrite/create user meta Cross-Site Request Forgery (CSRF) vulnerability allowing overwrite/create user meta discovered by Jetpack Scan team in WordPress Patreon WordPress plugin (versions <= 1.6.9).
Affected versions
max 1.7.0.
Status
vulnerable