CVE-2026-92431 Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration

The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end...

CVE-2026-92431

The Patreon WordPress plugin (versions prior to 1.10.0 ) is vulnerable to an authorization bypass due to a missing check on certain functionalities. This flaw allows unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that are typically hidden fr...

WordPress Patreon WordPress plugin < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration vulnerability

Unauthenticated Taxonomy and Term Enumeration vulnerability discovered by JunHee CHO in WordPress Plugin Patreon WordPress versions 1.10.0...

CVE-2026-92431 Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration

The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end...

CVE-2026-8976

The CVE-2026-8976 entry concerns the WordPress plugin RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator . It states a vulnerability in all versions up to and including 5.1.7: an authorization bypass where the plugin does not properly verify a user’s perm...