CVE-2026-92432

The Patreon WordPress plugin version before 1.10.0 is vulnerable to an open redirect because it fails to validate user-supplied redirect destinations. This allows unauthenticated attackers to redirect visitors to an arbitrary external URL via a crafted link, which can be leveraged for phishing ca...