Vulnerabilities

TI-2024-24944 CVE-2024-37440 · GHSA-6f6p-8qh5-2h9f

WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00341 Published 2024-11-01 No fix listed CWE-862

TI-2024-24922 CVE-2024-37418 · GHSA-pxph-wj43-wx7r

WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability

MEDIUM 44

Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00537 Published 2024-07-09 No fix listed CWE-434

TI-2024-23633 CVE-2024-35764 · GHSA-cf5m-6cw2-jwwh

WordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00316 Published 2024-06-21 No fix listed CWE-79

TI-2024-23506 CVE-2024-35637 · GHSA-r5m6-hx76-j96r

WordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability

LOW 20

Server-Side Request Forgery (SSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.3.6.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00242 Published 2024-06-03 No fix listed CWE-918

TI-2024-20657 CVE-2024-31281 · GHSA-wc2h-7hh3-87g6

WordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability

LOW 28

Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00339 Published 2024-05-17 No fix listed CWE-862

TI-2024-23115 CVE-2024-34828 · GHSA-2mqg-9v38-rpr6

WordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability

LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.32.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00253 Published 2024-05-10 No fix listed CWE-352

TI-2024-21167 CVE-2024-32090 · GHSA-mqxg-rqxp-xq35

WordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00214 Published 2024-04-15 No fix listed CWE-352

TI-2024-20656 CVE-2024-31280 · GHSA-pw55-22x2-xqg6

WordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00625 Published 2024-04-07 No fix listed CWE-434

TI-2024-20229 CVE-2024-30505 · GHSA-p9gp-6wp2-9v5c

WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00468 Published 2024-03-29 No fix listed CWE-862

TI-2024-20217 CVE-2024-30493 · GHSA-q766-xpmm-4999

WordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.7.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00214 Published 2024-03-29 No fix listed CWE-352

TI-2024-19990 CVE-2024-30244 · GHSA-2jw4-27vv-49jx

WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability

LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00659 Published 2024-03-28 No fix listed CWE-89

TI-2024-19939 CVE-2024-30193 · GHSA-x7gm-q293-r7gv

WordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.17.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-03-27 No fix listed CWE-79

TI-2024-19943 CVE-2024-30197 · GHSA-r6c2-64cx-qqr6

WordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.26.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-03-27 No fix listed CWE-79

TI-2023-19895 CVE-2023-38515 · GHSA-77gr-pj6j-w9f8

WordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)

LOW 25

Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00505 Published 2023-11-13 No fix listed CWE-918

TI-2023-16887 CVE-2023-34021 · GHSA-wp9m-9crg-7hfw

WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.29 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-06-23 No fix listed CWE-79

TI-2022-00740 CVE-2022-0833 · GHSA-9vf6-r8jp-w3m7

Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure

LOW 21

The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00494 Published 2022-03-28 Fixed in 3.4.135 CWE-352

TI-2015-03461 CVE-2015-4127 · GHSA-828x-j4vq-7vw7

Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for…

LOW 30

Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to ind…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.07416 Published 2015-05-28 No fix listed CWE-79

Vulnerabilities

Filters