{"api_version":"1","generated_at":"2026-10-17T23:22:04+00:00","cve":"CVE-2026-92431","urls":{"html":"https://cve.report/CVE-2026-92431","api":"https://cve.report/api/cve/CVE-2026-92431.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-92431","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-92431"},"summary":{"title":"Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration","description":"The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.","state":"PUBLISHED","assigner":"WPScan","published_at":"2026-10-17 06:16:34","updated_at":"2026-10-17 06:16:34"},"problem_types":["CWE-862 Missing Authorization"],"metrics":[],"references":[{"url":"https://wpscan.com/vulnerability/58797977-b859-4637-898d-d82675c36eea/","name":"https://wpscan.com/vulnerability/58797977-b859-4637-898d-d82675c36eea/","refsource":"contact@wpscan.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92431","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92431","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Unknown","product":"Patreon WordPress","version":"affected 1.10.0 semver","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[{"source":"CNA","value":"JunHee CHO","lang":"en"},{"source":"CNA","value":"WPScan","lang":"en"}],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Patreon WordPress","vendor":"Unknown","versions":[{"lessThan":"1.10.0","status":"affected","version":"0","versionType":"semver"}]}],"credits":[{"lang":"en","type":"finder","value":"JunHee CHO"},{"lang":"en","type":"coordinator","value":"WPScan"}],"descriptions":[{"lang":"en","value":"The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end."}],"problemTypes":[{"descriptions":[{"description":"CWE-862 Missing Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-17T06:00:12.898Z","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","shortName":"WPScan"},"references":[{"tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/58797977-b859-4637-898d-d82675c36eea/"}],"source":{"discovery":"EXTERNAL"},"title":"Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term Enumeration","x_generator":{"engine":"WPScan CVE Generator"}}},"cveMetadata":{"assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","assignerShortName":"WPScan","cveId":"CVE-2026-92431","datePublished":"2026-10-17T06:00:12.898Z","dateReserved":"2026-09-16T10:09:21.874Z","dateUpdated":"2026-10-17T06:00:12.898Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-10-17 06:16:34","lastModifiedDate":"2026-10-17 06:16:34","problem_types":["CWE-862 Missing Authorization"],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"92431","Ordinal":"1","Title":"Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term E","CVE":"CVE-2026-92431","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"92431","Ordinal":"1","NoteData":"The Patreon WordPress plugin before 1.10.0 does not perform an authorization check on some of its functionality, allowing unauthenticated users to enumerate the names of terms in any taxonomy, including non-public taxonomies that WordPress does not expose on the front end.","Type":"Description","Title":"Patreon WordPress < 1.10.0 - Unauthenticated Taxonomy and Term E"}]}}}