CVE-2018-20984: Critical severity wordpress plugin for patreon vulnerability
Published Aug 22, 2019
·Updated
The patreon-connect plugin before 1.2.2 for WordPress has Object Injection.
Affected Software
1 affected component
Patreon Patreon Wordpress Wordpress<1.2.2
Event History
Aug 22, 2019
CVE Published
via MITRE·01:29 PM
Data Sourced
via MITRE·01:29 PM
Description
Frequently Asked Questions
1
What is CVE-2018-20984?
CVE-2018-20984 is a vulnerability in the patreon-connect plugin for WordPress, allowing for Object Injection.
2
How severe is CVE-2018-20984?
CVE-2018-20984 has a severity rating of 9.8 (Critical).
3
What software versions are affected by CVE-2018-20984?
The patreon-connect plugin versions up to 1.2.2 for WordPress are affected by CVE-2018-20984.
4
How can I fix CVE-2018-20984?
To fix CVE-2018-20984, update the patreon-connect plugin to version 1.2.2 or above.
5
Where can I find more information about CVE-2018-20984?
You can find more information about CVE-2018-20984 on the WordPress plugin page: https://wordpress.org/plugins/patreon-connect/#developers