What’s Vulnerable › Products
andy_moyle Church Admin vulnerabilities
25 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Check whether your andy_moyle Church Admin version is affected
Latest andy_moyle Church Admin vulnerabilities
- CVE-2026-94421 — Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter (CVSS 6.4)
- CVE-2026-66478 — WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2026-61983 — WordPress Church Admin plugin <= 5.0.30 - Broken Access Control vulnerability (CVSS 5.3)
- CVE-2026-0682 — Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter (CVSS 2.2)
- CVE-2025-39553 — WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability (CVSS 4.3)
- CVE-2025-57896 — WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability (CVSS 5.3)
- CVE-2025-39555 — WordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-26941 — WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability (CVSS 9.3)
- CVE-2024-37440 — WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2024-37418 — WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability (CVSS 9.9)
- CVE-2024-35764 — WordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-35637 — WordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.4)
- CVE-2024-31281 — WordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability (CVSS 6.3)
- CVE-2024-34828 — WordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2024-32090 — WordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2024-31280 — WordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability (CVSS 8.8)
- CVE-2024-30505 — WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2024-30493 — WordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2024-30244 — WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability (CVSS 8.8)
- CVE-2024-30197 — WordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-30193 — WordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2023-38515 — WordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF) (CVSS 4.9)
- CVE-2023-34021 — WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
- CVE-2022-0833 — Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure (CVSS 4.3)
- CVE-2015-4127 — (CVSS 4.3)