Unrated severityNVD Advisory· Published Apr 12, 2021· Updated Aug 3, 2024
Patreon WordPress < 1.7.0 - CSRF to Disconnect Sites From Patreon
CVE-2021-24231
Description
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Patreon by visiting a specially crafted link.
Affected products
1- Range: 1.7.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/mitrex_refsource_MISC
- wpscan.com/vulnerability/f8ab6855-a319-47ac-82fb-58b181e77500mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.