andy_moyle

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

andy_moyle records in CISA KEV

No andy_moyle vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Church Admin 17 records MEDIUM

Records

30 records

TI-2024-20656 CVE-2024-31280 · GHSA-pw55-22x2-xqg6

WordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00625 Published 2024-04-07 No fix listed CWE-434

TI-2025-19812 CVE-2025-26941 · GHSA-7374-x3rm-h27g

WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability

MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin allows SQL Injection.This issue affects Church Admin: from n/a through <= 5.0.18.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.0062 Published 2025-03-26 No fix listed CWE-89

TI-2026-47232 CVE-2026-66478 · GHSA-qc76-7cx7-6pgf

WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability

MEDIUM 46

Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-08-13 No fix listed CWE-89

TI-2024-24922 CVE-2024-37418 · GHSA-pxph-wj43-wx7r

WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability

MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00537 Published 2024-07-09 No fix listed CWE-434

TI-2024-19990 CVE-2024-30244 · GHSA-2jw4-27vv-49jx

WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability

LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00659 Published 2024-03-28 No fix listed CWE-89

TI-2024-35993 CVE-2024-53795 · GHSA-r5xc-6chv-hc86

WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Church Admin: from n/a through <= 5.0.8.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00551 Published 2024-12-06 No fix listed CWE-862

TI-2024-33871 CVE-2024-50438 · GHSA-33jq-g649-fc48

WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin allows Reflected XSS.This issue affects Church Admin: from n/a through < 5.0.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-10-28 No fix listed CWE-79

TI-2023-16887 CVE-2023-34021 · GHSA-wp9m-9crg-7hfw

WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.29 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-06-23 No fix listed CWE-79

TI-2023-14594 CVE-2023-30782 · GHSA-3qg7-hh88-r5c3

WordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.5 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-16 No fix listed CWE-79

TI-2026-44355 CVE-2026-61983 · GHSA-5v3q-xc3m-8fm4

WordPress Church Admin plugin <= 5.0.30 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.30.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00294 Published 2026-07-13 No fix listed CWE-862

TI-2015-03461 CVE-2015-4127 · GHSA-828x-j4vq-7vw7

Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for…

LOW 30

Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to ind…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07416 Published 2015-05-28 No fix listed CWE-79

TI-2025-35750 CVE-2025-57896 · GHSA-hmp4-c24h-pp2r

WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability

LOW 29

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00224 Published 2025-08-22 No fix listed CWE-862

TI-2025-26297 CVE-2025-39555 · GHSA-hh43-6g5g-5cr9

WordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin allows Stored XSS.This issue affects Church Admin: from n/a through <= 5.0.23.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0036 Published 2025-04-16 No fix listed CWE-79

TI-2024-23633 CVE-2024-35764 · GHSA-cf5m-6cw2-jwwh

WordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00316 Published 2024-06-21 No fix listed CWE-79

TI-2024-19943 CVE-2024-30197 · GHSA-r6c2-64cx-qqr6

WordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.26.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-03-27 No fix listed CWE-79

TI-2024-19939 CVE-2024-30193 · GHSA-x7gm-q293-r7gv

WordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.17.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-03-27 No fix listed CWE-79

TI-2024-20657 CVE-2024-31281 · GHSA-wc2h-7hh3-87g6

WordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability

LOW 28

Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00339 Published 2024-05-17 No fix listed CWE-862

TI-2026-70197 CVE-2026-94421 · GHSA-jgmr-w25q-m9q5

Stored cross-site scripting in Church Admin WordPress plugin

LOW 27

The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00152 Published 2026-10-10 No fix listed CWE-79

TI-2024-20229 CVE-2024-30505 · GHSA-p9gp-6wp2-9v5c

WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00468 Published 2024-03-29 No fix listed CWE-862

TI-2023-19895 CVE-2023-38515 · GHSA-77gr-pj6j-w9f8

WordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)

LOW 25

Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00505 Published 2023-11-13 No fix listed CWE-918

TI-2022-00740 CVE-2022-0833 · GHSA-9vf6-r8jp-w3m7

Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure

LOW 21

The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00494 Published 2022-03-28 Fixed in 3.4.135 CWE-352

TI-2025-26295 CVE-2025-39553 · GHSA-jmrw-63q3-mhxj

WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability

LOW 20

Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 5.0.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00256 Published 2025-09-09 No fix listed CWE-862

TI-2024-24944 CVE-2024-37440 · GHSA-6f6p-8qh5-2h9f

WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00341 Published 2024-11-01 No fix listed CWE-862

TI-2024-23506 CVE-2024-35637 · GHSA-r5m6-hx76-j96r

WordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability

LOW 20

Server-Side Request Forgery (SSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.3.6.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00242 Published 2024-06-03 No fix listed CWE-918

TI-2024-23115 CVE-2024-34828 · GHSA-2mqg-9v38-rpr6

WordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability

LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.32.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00253 Published 2024-05-10 No fix listed CWE-352

Open these records in search →