Unrated severityNVD Advisory· Published Oct 17, 2026

CVE-2026-92431

Description

The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Patreon WordPress pluginllm-fuzzy
Range: <1.10.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/58797977-b859-4637-898d-d82675c36eea/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000