WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in Patreon WordPress

Connect your WordPress site to Patreon and increase your members and pledges!

12Reported vulnerabilities
9.8Highest CVSS score
1.9.17Latest version
3,000+Active installs

What to do now

Update Patreon WordPress to 1.11.0 or later. 12 of these have a fixed version available. Updating resolves them.

Plugin last updated: March 18, 2026 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2021-24229 Critical 9.6 1.8% Before 1.7.2 1.7.2 April 12, 2021
CVE-2021-24228 Critical 9.6 1.9% Before 1.7.2 1.7.2 April 12, 2021
CVE-2021-24227 High 7.5 5.9% Before 1.7.0 1.7.0 April 12, 2021
CVE-2021-24230 High 8.1 0.6% Before 1.7.0 1.7.0 April 12, 2021
CVE-2021-24231 Medium 6.5 0.6% Before 1.7.0 1.7.0 April 12, 2021
CVE-2018-20984 Critical 9.8 2.0% Before 1.2.2 1.2.2 August 22, 2019
CVE-2021-25026 Medium 5.5 0.7% Before 1.8.2 1.8.2 March 14, 2022
CVE-2023-41129 High 8.8 0.3% 1.8.6 and earlier 1.8.8 November 18, 2023
CVE-2026-108479 High 8.1 0.1% 0 to 1.9.17 (inclusive) 1.10.0 October 12, 2026
CVE-2026-108481 High 7.4 0.1% 0 to 1.10.0 (inclusive) 1.11.0 October 12, 2026
CVE-2025-24588 Medium 6.5 0.5% 0 to 1.9.1 (inclusive) 1.9.2 January 24, 2025
CVE-2024-37430 Medium 5.3 0.4% 0 to 1.9.0 (inclusive)
0 to 1.9.0 (inclusive)		 1.9.1 July 9, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.