The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Patreon by visiting a specially crafted link.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Patreon Connect Plugin | — | Update patreon-connect plugin to version 1.7.0, or a newer patched version | May 15, 2025 | Mar 26, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub