CVE-2026-92432: Patreon WordPress 0 to before 1.10.0

Affected technology

Patreon WordPress · 0 to before 1.10.0
Vendor not specified by the source

Description’s affected range: before 1.10.0 does not validate a user-supplied redirect destination before redirecting

Component: Not specified by the source

What an attacker can do

Unauthenticated attackers can redirect visitors to an arbitrary external URL through a crafted link, which is useful for phishing.