Patreon WordPress

2021-03-26

Patreon WordPress < 1.7.0 - Unauthenticated Local File Disclosure

fixed in version 1.7.0✓

2021-03-26

Patreon WordPress < 1.7.0 - CSRF to Overwrite/Create User Meta

fixed in version 1.7.0✓

2021-03-26

Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon

fixed in version 1.7.0✓

2021-03-26

Patreon WordPress < 1.7.2 - Reflected XSS on Login Form

fixed in version 1.7.2✓

2021-03-26

Patreon WordPress < 1.7.2 - Reflected XSS on patreon_save_attachment_patreon_level AJAX action

fixed in version 1.7.2✓

2018-11-23

Patreon Connect < 1.2.2 - PHP Object Injection

fixed in version 1.2.2✓

Is this your WordPress plugin?

We offer WordPress plugin security testing to help identify security vulnerabilities within your plugin. Please note that this is a paid service. If you are interested in talking about having your plugin tested by WordPress security experts, get in touch.