CVE-2026-92432

The Patreon WordPress plugin versions before 1.10.0 is vulnerable to an Open Redirect (CWE-601) because it fails to validate a user-supplied redirect destination. Unauthenticated attackers can use a crafted link to redirect visitors to an arbitrary external URL, which can be leveraged for phishin...