Churchadminplugin - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2024-12-06.

Products

• Church Admin - 3 CVEs

Newest CVEs of Churchadminplugin

• CVE-2024-53795 - CVSS 5.3 (medium), 2024-12-06: Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects…
• CVE-2023-30782 - CVSS 7.1 (high), 2023-08-16: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.5 versions.
• CVE-2018-20971 - CVSS 8.8 (high), 2019-08-16: The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.