Unrated severityNVD Advisory· Published Oct 17, 2026

CVE-2026-92432

Description

The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL through a crafted link, which is useful for phishing.

Affected products

WordPress/Patreon WordPress pluginllm-fuzzy
Range: <1.10.0

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/8f9a085f-dc4d-46c2-a738-3c2ab562b90c/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000