WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
church-admin
Published
2023-11-13
Title
Church Admin < 3.8.0 - Server-Side Request Forgery (SSRF)
Slug
church-admin
Published
2024-03-25
Title
Church Admin < 4.0.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
church-admin
Published
2024-03-25
Title
Church Admin < 4.1.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via meta-text
Slug
church-admin
Published
2024-03-28
Title
Church Admin < 4.1.8 - Cross-Site Request Forgery
Slug
church-admin
Published
2024-03-28
Title
Church Admin < 4.1.19 - Missing Authorization
Slug
church-admin
Published
2024-03-26
Title
Church Admin < 4.0.28 - Authenticated (Contributor+) SQL Injection
Slug
church-admin
Published
2024-04-05
Title
Church Admin < 4.1.7 - Missing Authorization
Slug
church-admin
Published
2024-04-05
Title
Church Admin < 4.1.6 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
church-admin
Published
2024-04-11
Title
Church Admin < 4.0.28 - Cross-Site Request Forgery
Slug
church-admin
Published
2024-05-09
Title
Church Admin < 4.2.0 - Cross-Site Request Forgery
Slug
church-admin
Published
2024-05-30
Title
Church Admin < 4.4.0 - Authenticated (Admin+) Server-Side Request Forgery
Slug
church-admin
Published
2024-06-28
Title
Church Admin < 4.4.5 - Missing Authorization
Slug
church-admin
Published
2024-06-17
Title
Church Admin < 4.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
church-admin
Published
2024-07-04
Title
Church Admin < 4.4.7 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
church-admin
Published
2024-10-24
Title
Church Admin < 5.0.0 - Reflected Cross-Site Scripting
Slug
church-admin
Published
2024-12-02
Title
Church Admin < 5.0.9 - Missing Authorization
Slug
church-admin
Published
2025-04-16
Title
Church Admin < 5.0.10 - Unauthenticated Information Disclosure
Slug
church-admin
Published
2025-04-16
Title
Church Admin < 5.0.24 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
church-admin
Published
2025-03-13
Title
Church Admin < 5.0.19 - Unauthenticated SQL Injection
Slug
church-admin
Published
2025-08-22
Title
Church Admin < 5.0.27 - Missing Authorization
Slug
church-admin
Published
2026-01-16
Title
Church Admin < 5.0.29 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter
Slug
church-admin
Published
2026-08-10
Title
Church Admin < 5.1.2 - Unauthenticated SQL Injection
Slug
church-admin
Published
2026-08-03
Title
Church Admin < 5.1.0 - Missing Authorization
Slug
church-admin
Published
2026-10-09
Title
Church Admin < 5.1.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter
Slug
church-management
Published
2025-05-16
Title
WPCHURCH <= 2.7.0 - Unauthenticated Local File Inclusion