CodebardCodebard's Patron Button And Widgets For Patreon
3 matches found
CVE-2023-47765
CVE-2023-47765: Cross-Site Request Forgery in CodeBard’s Patron Button and Widgets for Patreon plugin (WordPress) <= 2.1.9. Root cause: missing nonce validation enabling CSRF with unauthenticated attackers to forge actions. Affected versions:
8.8CVSS6.5AI score0.00256EPSS
Save
CVE-2024-33928
CVE-2024-33928 affects CodeBard's Patron Button and Widgets for Patreon (WordPress plugin), with a Reflected XSS vulnerability due to improper neutralization of input during web page generation. Affected versions are from n/a through 2.2.0. Exploitation would involve attacker-supplied script exec...
7.1CVSS5.2AI score0.0033EPSS
Save