WordPress Plugin Vulnerabilities

Church Admin < 1.2550 - CSRF

Description

The Church Admin WordPress plugin was affected by a CSRF security vulnerability.

Affects Plugins

Plugin icon
church-admin
Fixed in 1.2550

References

CVE
CVE-2018-20971

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
8.8 (high)

Miscellaneous

Verified
No
WPVDB ID
fa76cc04-9827-4532-8c32-678bd348bfd1

Timeline

Publicly Published
2018-02-14 (about 8 years ago)
Added
2019-08-23 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2024-11-23
Title
LinkLaunder SEO <= 0.92.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2025-02-24
Title
JPG, PNG Compression and Optimization <= 1.7.35 - Cross-Site Request Forgery
Published
2023-02-22
Title
Integration for Contact Form 7 and Zoho CRM, Bigin < 1.2.3 - Cross-Site Request Forgery (CSRF)
Published
2026-01-23
Title
SurveyJS: Drag & Drop WordPress Form Builder to create, style and embed multiple forms of any complexity < 2.5.3 - Cross-Site Request Forgery to Survey Cloning
Published
2023-02-06
Title
A2 Optimized WP < 3.0.5 - Data Collection Toggle via CSRF