Patreon vulnerabilities
We track 3 vulnerabilities in Patreon products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
Latest Patreon vulnerabilities
- 7.4 High severity
Patreon WordPress: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.10.0.
- 8.1 High severity
Patreon WordPress: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Patreon Patreon WordPress patreon-connect allows Cross Site Request Forgery.This issue affects Patreon WordPress: from n/a through 1.9.17.
- 9.1 Critical severity
flutter_downloader: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection in the flutter_downloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app's container. The internal database of the framework is exposed to the local user if an app u