WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
christian-science-bible-lesson-subjects
Published
2024-11-08
Title
Christian Science Bible Lesson Subjects < 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
christmas-greetings
Published
2024-03-28
Title
Christmas Greetings <= 1.2.5 - Reflected Cross-Site Scripting
Slug
christmas-panda
Published
2025-03-27
Title
Christmas Panda < 1.1.0 - Cross-Site Request Forgery
Slug
christmasify
Published
2024-08-09
Title
Christmasify! < 1.5.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
chronoforms
Published
2023-03-14
Title
Chronoforms <= 7.0.9 - CSRF
Slug
church-admin
Published
2014-08-01
Title
Church Admin <= 0.4.2 - Cross-Site Scripting (XSS)
Slug
church-admin
Published
2015-05-19
Title
Church Admin < 0.810 - Stored Cross-Site Scripting (XSS)
Slug
church-admin
Published
2017-12-28
Title
Church Admin 0.33.2.1 - Unauthenticated Directory Traversal
Slug
church-admin
Published
2018-02-14
Title
Church Admin < 1.2550 - CSRF
Slug
church-admin
Published
2022-03-07
Title
Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure
Slug
church-admin
Published
2023-06-13
Title
Church Admin < 3.7.30 - Reflected XSS
Slug
church-admin
Published
2023-08-16
Title
Church Admin < 3.7.6 - Reflected XSS
Slug
church-admin
Published
2023-11-13
Title
Church Admin < 3.8.0 - Server-Side Request Forgery (SSRF)
Slug
church-admin
Published
2024-03-25
Title
Church Admin < 4.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
church-admin
Published
2024-03-25
Title
Church Admin < 4.1.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via meta-text
Slug
church-admin
Published
2024-03-28
Title
Church Admin < 4.1.8 - Cross-Site Request Forgery
Slug
church-admin
Published
2024-03-28
Title
Church Admin < 4.1.19 - Missing Authorization
Slug
church-admin
Published
2024-03-26
Title
Church Admin < 4.0.28 - Authenticated (Contributor+) SQL Injection
Slug
church-admin
Published
2024-04-05
Title
Church Admin < 4.1.7 - Missing Authorization
Slug
church-admin
Published
2024-04-05
Title
Church Admin < 4.1.6 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
church-admin
Published
2024-04-11
Title
Church Admin < 4.0.28 - Cross-Site Request Forgery
Slug
church-admin
Published
2024-05-09
Title
Church Admin < 4.2.0 - Cross-Site Request Forgery
Slug
church-admin
Published
2024-05-30
Title
Church Admin < 4.4.0 - Authenticated (Admin+) Server-Side Request Forgery
Slug
church-admin
Published
2024-06-28
Title
Church Admin < 4.4.5 - Missing Authorization
Slug
church-admin
Published
2024-06-17
Title
Church Admin < 4.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting