wpforchurch

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

wpforchurch records in CISA KEV

No wpforchurch vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-39150 CVE-2025-63002 · GHSA-mwq9-6477-4gvh

WordPress Sermon Manager plugin <= 2.30.0 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sermon Manager: from n/a through <…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00216 Published 2025-12-18 No fix listed CWE-862

TI-2025-39148 CVE-2025-63000 · GHSA-45h8-36p7-c6vp

WordPress Sermon Manager plugin <= 2.30.0 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpforchurch Sermon Manager sermon-manager-for-wordpress allows Stored XSS.This issue affects Sermon Manager: from n/a…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00169 Published 2025-12-31 No fix listed CWE-79

TI-2025-11345 CVE-2025-12368 · GHSA-hh2f-jfp4-h82c

Sermon Manager <= 2.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The Sermon Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `sermon-views` shortcode in all versions up to, and including, 2.30.0.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00238 Published 2025-12-05 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0