CVE-2025-24588: WordPress Patreon WordPress plugin <= 1.9.1 - Broken Access Control vulnerability
Published Jan 24, 2025
·Updated
Missing Authorization vulnerability in patreon Patreon WordPress patreon-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Patreon WordPress: from n/a through <= 1.9.1.
Affected Software
1 affected component
Patreon Patreon WordPress<=1.9.1
Remediation
Information
Update the WordPress Patreon WordPress plugin to the latest available version (at least 1.9.2).
Event History
Jan 24, 2025
CVE Published
via MITRE·05:24 PM
Data Sourced
via MITRE·05:24 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-24588?
CVE-2025-24588 has been classified with a high severity level due to its potential to exploit access control issues.
2
How do I fix CVE-2025-24588?
To fix CVE-2025-24588, update the Patreon WordPress plugin to version 1.9.2 or later.
3
What versions are affected by CVE-2025-24588?
CVE-2025-24588 affects all versions of the Patreon WordPress plugin up to and including 1.9.1.
4
What type of vulnerability is CVE-2025-24588?
CVE-2025-24588 is classified as a Missing Authorization vulnerability.
5
What can happen if CVE-2025-24588 is exploited?
Exploiting CVE-2025-24588 can lead to unauthorized access, allowing attackers to bypass security levels and access restricted content.