3 matches found
CVE-2023-47765
CVE-2023-47765: Cross-Site Request Forgery in CodeBard’s Patron Button and Widgets for Patreon plugin (WordPress) <= 2.1.9. Root cause: missing nonce validation enabling CSRF with unauthenticated attackers to forge actions. Affected versions:
CVE-2024-33928
CVE-2024-33928 affects CodeBard's Patron Button and Widgets for Patreon (WordPress plugin), with a Reflected XSS vulnerability due to improper neutralization of input during web page generation. Affected versions are from n/a through 2.2.0. Exploitation would involve attacker-supplied script exec...
CVE-2023-30491
CVE-2023-30491 is an unauthenticated reflected XSS in CodeBard's Patron Button and Widgets for Patreon WordPress plugin (versions