CVE-2026-92433 - Vulnerability Details - OpenCVE

The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request (CSRF), taking over the site's Patreon integration.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Patreon	Patreon Wordpress
Wordpress-extensions	Patreon Wordpress

No data.

No data.

References

Link	Providers
https://wpscan.com/vulnerability/ea970f2e-0fe8-4fef-99ff-a74255fa5a04/

History

Wed, 21 Oct 2026 17:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Patreon Patreon patreon Wordpress Wordpress-extensions Wordpress-extensions patreon Wordpress
Vendors & Products		Patreon Patreon patreon Wordpress Wordpress-extensions Wordpress-extensions patreon Wordpress

Sun, 18 Oct 2026 12:30:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Sat, 17 Oct 2026 07:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-352

Sat, 17 Oct 2026 06:15:00 +0000

Type	Values Removed	Values Added
Description		The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request (CSRF), taking over the site's Patreon integration.
Title		Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF
References		https://wpscan.com/vulnerability/ea970f2e-0fe8-4fef-99ff-a74255fa5a04/

MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2026-10-17T06:00:12.725Z

Updated: 2026-10-18T11:12:33.034Z

Reserved: 2026-09-16T10:09:33.392Z

Link: CVE-2026-92433

Vulnrichment

Updated: 2026-10-18T11:01:33.255Z

NVD

Status : Deferred

Published: 2026-10-17T06:16:34.457

Modified: 2026-10-19T21:04:50.950

Link: CVE-2026-92433

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-92433", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "state": "PUBLISHED", "assignerShortName": "WPScan", "dateReserved": "2026-09-16T10:09:33.392Z", "datePublished": "2026-10-17T06:00:12.725Z", "dateUpdated": "2026-10-18T11:12:33.034Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-10-17T06:00:12.725Z"}, "title": "Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF", "problemTypes": [{"descriptions": [{"description": "CWE-352 Cross-Site Request Forgery (CSRF)", "lang": "en", "type": "CWE"}]}], "affected": [{"vendor": "Unknown", "product": "Patreon WordPress", "versions": [{"status": "affected", "versionType": "semver", "version": "0", "lessThan": "1.10.0"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request (CSRF), taking over the site's Patreon integration."}], "references": [{"url": "https://wpscan.com/vulnerability/ea970f2e-0fe8-4fef-99ff-a74255fa5a04/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "credits": [{"lang": "en", "value": "JunHee CHO", "type": "finder"}, {"lang": "en", "value": "WPScan", "type": "coordinator"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "WPScan CVE Generator"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-92433", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-18T11:01:38.513968Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-18T11:12:33.034Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-92433", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-18T11:01:38.513968Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-352", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-18T11:01:33.255Z"}}], "cna": {"title": "Patreon WordPress < 1.10.0 - Patreon Integration Takeover via CSRF", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "JunHee CHO"}, {"lang": "en", "type": "coordinator", "value": "WPScan"}], "affected": [{"vendor": "Unknown", "product": "Patreon WordPress", "versions": [{"status": "affected", "version": "0", "lessThan": "1.10.0", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://wpscan.com/vulnerability/ea970f2e-0fe8-4fef-99ff-a74255fa5a04/", "tags": ["exploit", "vdb-entry", "technical-description"]}], "x_generator": {"engine": "WPScan CVE Generator"}, "descriptions": [{"lang": "en", "value": "The Patreon WordPress plugin before 1.10.0 does not verify a nonce when connecting the site to a Patreon account, allowing attackers to make a logged-in administrator re-link the integration to an attacker-controlled account via a crafted request (CSRF), taking over the site's Patreon integration."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "CWE-352 Cross-Site Request Forgery (CSRF)"}]}], "providerMetadata": {"orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan", "dateUpdated": "2026-10-17T06:00:12.725Z"}}}, "cveMetadata": {"cveId": "CVE-2026-92433", "state": "PUBLISHED", "dateUpdated": "2026-10-18T11:12:33.034Z", "dateReserved": "2026-09-16T10:09:33.392Z", "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "datePublished": "2026-10-17T06:00:12.725Z", "assignerShortName": "WPScan"}, "dataVersion": "5.2"}