Orta CVSS 4.3
CVE-2026-92432: CVE-2026-92432: açık yönlendirme
Açıklama (NVD)
The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL through a crafted link, which is useful for phishing.
Özet bilgiler
- CVSS v3.1
- 4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N - EPSS
- %0,16 (yüzdelik 6)
- CWE
- CWE-601
- Yama
- Yok / bilinmiyor