cleantalk
Vulnerabilities and Security Researches

Patreon WordPress, CVE-2025-24588

CVE, Research URL

CVE-2025-24588

Home page URL

Security reports for Patreon WordPress

Application

Patreon WordPress

Published on
Jan 24, 2025
Research Description
Missing Authorization vulnerability in patreon Patreon WordPress patreon-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Patreon WordPress: from n/a through <= 1.9.1.
Affected versions
max 1.9.2.
Status
vulnerable
Previous vulnerability researches
Patreon WordPress (CVE-2021-24228) , Jun 07, 2024
Patreon WordPress (CVE-2018-20984) , Jun 07, 2024
Patreon WordPress (CVE-2021-24231) , Jun 07, 2024
Patreon WordPress (CVE-2021-24227) , Jun 07, 2024
Patreon WordPress (CVE-2021-25026) , Jun 07, 2024
New vulnerability
GamiPress &#8211; The #1 gamification plugin to reward points, achievements, badges &amp; ranks in WordPress (CVE-2026-107320) , Oct 15, 2026
GamiPress &#8211; The #1 gamification plugin to reward points, achievements, badges &amp; ranks in WordPress (CVE-2026-107319) , Oct 15, 2026
User Registration &#8211; Custom Registration Form, Login Form, and User Profile WordPress Plugin (CVE-2026-105881) , Oct 15, 2026
User Registration &#8211; Custom Registration Form, Login Form, and User Profile WordPress Plugin (CVE-2026-109699) , Oct 15, 2026
User Registration &#8211; Custom Registration Form, Login Form, and User Profile WordPress Plugin (CVE-2026-106598) , Oct 15, 2026