LOWCVSS v3.1 3.7Vulnerability
CVE-2026-92431
The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.
Properties
- Severity
- LOW
- Nvd fetched at
- 2026-10-20T21:14:08.448323+00:00
- Epss score
- 0.00166
- Cvss severity
- LOW
- Cvss score
- 3.7
- Retrieved at
- 2026-10-21T01:24:51+00:00
- Last source
- FIRST EPSS
- Score
- 3.7
- Cvss version
- 3.1
- Cve id
- CVE-2026-92431
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- First seen by Signal
- 2026-10-18T13:39:03+00:00
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- Published at
- 2026-10-17T06:16:34.257
- Last modified
- 2026-10-19T21:04:50.950
- Epss percentile
- 0.0555
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph