UNKNOWN NVD

CVE-2026-92432

The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redi

The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL through a crafted link, which is useful for phishing.

References

https://wpscan.com/vulnerability/8f9a085f-dc4d-46c2-a738-3c2ab562b90c/

Published: 2026-10-17 · Source: NVD · Feed updated: 2026-10-17

This unknown severity vulnerability was published on 2026-10-17 via NVD.

vulnfeed aggregates 5676 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.