Description (CNA)
The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Patreon by visiting a specially crafted link.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Patreon WordPress | affected 1.7.0 before 1.7.0 |
CWE
CWE-352
References
- https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/
- https://wpscan.com/vulnerability/f8ab6855-a319-47ac-82fb-58b181e77500
ADP enrichment
No English description supplied.