WordPress plugin

CodeBard’s Patron Button and Widgets for Patreon security & vulnerabilities

Q: Is any CodeBard’s Patron Button and Widgets for Patreon vulnerability listed in CISA KEV?

No. None of the known CodeBard’s Patron Button and Widgets for Patreon vulnerabilities is currently listed in the CISA KEV catalog.

patron-button-and-widgets-by-codebard— active installsLast vulnerability Apr 29, 2024

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

4Known vulnerabilities

Critical0
High0
Medium4
Low0

Vulnerabilities per year

All CodeBard’s Patron Button and Widgets for Patreon vulnerabilities

CodeBard’s Patron Button and Widgets for Patreon vulnerabilities
Severity	Vulnerability	CVE	Published
Medium6.1	Reflected Cross-Site Scripting ≤2.2.0No patch available	CVE-2024-33928	Apr 29, 2024
Medium4.3	Cross-Site Request Forgery ≤2.1.9Update to 2.2.0	CVE-2023-47765	Nov 14, 2023
Medium6.1	Reflected Cross-Site Scripting via cb_p6_tab ≤2.1.9Update to 2.2.0	CVE-2023-47524	Nov 7, 2023
Medium6.1	Reflected Cross-Site Scripting via 'site_account' ≤2.1.8Update to 2.1.9	CVE-2023-30491	Jul 24, 2023

Medium6.1
Reflected Cross-Site Scripting
≤2.2.0No patch available
CVE-2024-33928Apr 29, 2024
Medium4.3
Cross-Site Request Forgery
≤2.1.9Update to 2.2.0
CVE-2023-47765Nov 14, 2023
Medium6.1
Reflected Cross-Site Scripting via cb_p6_tab
≤2.1.9Update to 2.2.0
CVE-2023-47524Nov 7, 2023
Medium6.1
Reflected Cross-Site Scripting via 'site_account'
≤2.1.8Update to 2.1.9
CVE-2023-30491Jul 24, 2023

CodeBard’s Patron Button and Widgets for Patreon: common questions

Does CodeBard’s Patron Button and Widgets for Patreon have known vulnerabilities?

Yes. VulnCrest Radar lists 4 known vulnerabilities in CodeBard’s Patron Button and Widgets for Patreon: 4 medium. At least one is not fixed in the latest version.

How do I check which version of CodeBard’s Patron Button and Widgets for Patreon I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent CodeBard’s Patron Button and Widgets for Patreon vulnerability?

CVE-2024-33928, published Apr 29, 2024: CodeBard's Patron Button and Widgets for Patreon <= 2.2.0 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).

Is any CodeBard’s Patron Button and Widgets for Patreon vulnerability listed in CISA KEV?

No. None of the known CodeBard’s Patron Button and Widgets for Patreon vulnerabilities is currently listed in the CISA KEV catalog.