WordPress Plugin Vulnerabilities

Patreon Connect < 1.2.2 - PHP Object Injection

Description

The Patreon WordPress WordPress plugin was affected by a PHP Object Injection security vulnerability.

Affects Plugins

Plugin icon
patreon-connect
Fixed in 1.2.2

References

CVE
CVE-2018-20984

Classification

Type
OBJECT INJECTION
OWASP top 10
A8: Insecure Deserialization
CWE
CWE-502
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
3f7052f6-bd44-4cba-9fae-1e6ca9bc887d

Timeline

Publicly Published
2018-11-23 (about 7 years ago)
Added
2019-08-22 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2026-03-16
Title
Organici Library < 2.1.3 - Authenticated (Subscriber+) PHP Object Injection
Published
2025-10-01
Title
WooCommerce Vehicle Parts Finder < 3.8 - Unauthenticated PHP Object Injection
Published
2026-03-04
Title
Au Pair Agency - Babysitting & Nanny Theme <= 1.2.2 - Unauthenticated PHP Object Injection
Published
2026-03-23
Title
Halstein < 1.8 - Unauthenticated PHP Object Injection
Published
2026-02-16
Title
Ippsum < 1.2.1 - Unauthenticated PHP Object Injection