{"id":"CVE-2026-92431","kind":"vulnerability","aliases":["CVE-2026-92431"],"related":[],"title":"Patreon WordPress plugin: unauthenticated users can list taxonomy term names","description":"The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.","summary":"The Patreon WordPress plugin before 1.10.0 skips an authorization check on some functionality. An unauthenticated visitor can enumerate the names of terms in any taxonomy, including private taxonomies WordPress does not show on the front end.","severity":"low","cvss":3.7,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["package","patreon-plugin","self-hosted","wordpress"],"not_affected_if":["plugin-not-installed"],"how_to_check":"- Check the installed Patreon plugin version in the WordPress admin Plugins screen or with `wp plugin get patreon --field=version`\n- unknown","fix":"- Update the Patreon WordPress plugin to `1.10.0` or later\n- unknown","status":"open","published_at":"2026-10-17T06:16:34+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","triaged_at":"2026-10-25T04:45:18+00:00","updated_at":"2026-10-25T04:45:18+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-25T04:45:18Z","model":"claude-haiku-5-5","output":{"fix":"- Update the Patreon WordPress plugin to `1.10.0` or later\n- unknown","reach":"internet","title":"Patreon WordPress plugin: unauthenticated users can list taxonomy term names","impact":"low","summary":"The Patreon WordPress plugin before 1.10.0 skips an authorization check on some functionality. An unauthenticated visitor can enumerate the names of terms in any taxonomy, including private taxonomies WordPress does not show on the front end.","category":"package","nicknames":[],"who_cares":["wordpress","patreon-plugin","self-hosted"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker lists private taxonomy term names without logging in","analyst_note":"","how_to_check":"- Check the installed Patreon plugin version in the WordPress admin Plugins screen or with `wp plugin get patreon --field=version`\n- unknown","needs_analyst":false,"not_affected_if":["plugin-not-installed"],"who_is_affected":"Sites running the Patreon WordPress plugin before 1.10.0 are exposed, since the flaw is in the plugin's own endpoints and needs no login. The sources do not say which plugin endpoint is affected or whether a site with the plugin set up differently is safe. Sites that do not run the plugin are not affected.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000578,"input_tokens":3305,"output_tokens":495,"severity_before":"low"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-92431':13A,16A '1.10.0':30B,66C 'allow':78C 'author':33B,71C 'check':34B,72C 'cve':11A,14A 'end':60B,103C 'enumer':42B,82C 'expos':99C 'front':59B,102C 'function':37B,77C 'host':23B 'includ':50B,90C 'list':7A 'name':10A,44B,84C 'non':92C 'non-publ':91C 'packag':17B 'patreon':1A,19B,26B,62C 'patreon-plugin':18B 'perform':69C 'plugin':3A,20B,28B,64C 'privat':51B 'public':93C 'self':22B 'self-host':21B 'show':56B 'skip':31B 'taxonomi':8A,49B,52B,89C,94C 'term':9A,46B,86C 'unauthent':4A,39B,79C 'user':5A,80C 'visitor':40B 'wordpress':2A,24B,27B,53B,63C,96C","nicknames":[],"mitigations":[],"who_affected":"Sites running the Patreon WordPress plugin before 1.10.0 are exposed, since the flaw is in the plugin's own endpoints and needs no login. The sources do not say which plugin endpoint is affected or whether a site with the plugin set up differently is safe. Sites that do not run the plugin are not affected.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-17T06:16:34+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-92431","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92431","severity":null,"published_at":"2026-10-17T06:16:34+00:00","modified_at":"2026-10-19T21:04:50+00:00","first_seen_at":"2026-10-23T21:57:14+00:00","fetched_at":"2026-10-23T22:28:55+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}