Question 1

What is CVE-2026-92432 — CVE-2026-92432?

Accepted Answer

The Patreon WordPress plugin before 1.10.0 does not validate a user-supplied redirect destination before redirecting, allowing unauthenticated attackers to redirect visitors to an arbitrary external URL through a crafted link, which is useful for phishing.

Question 2

What is the authoritative source for CVE-2026-92432?

Accepted Answer

CVE-2026-92432 (CVE-2026-92432) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-92432CVE-2026-92432

Description

Scoring