CVE-2026-92431: Patreon WordPress 0 to before 1.10.0

Affected technology

Patreon WordPress · 0 to before 1.10.0
Vendor not specified by the source

Description’s affected range: before 1.10.0 does not perform an authorization check on some of its functionality

Component: Not specified by the source

What an attacker can do

Unauthenticated users can enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.

Published 17-Oct-2026 06:36 UTC

KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-17 06:36:38.037407+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-92431.html