CVE-2023-38515: WordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)
Published Nov 13, 2023
·Updated
Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56.
Affected Software
1 affected component
Church Admin Project Church Admin Wordpress<=3.7.56
Remediation
Information
Update to 3.8.0 or a higher version.
Event History
Nov 13, 2023
CVE Published
via MITRE·02:32 AM
Data Sourced
via MITRE·02:32 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-38515?
CVE-2023-38515 is a Server Side Request Forgery (SSRF) vulnerability in the WordPress Church Admin Plugin.
2
How severe is CVE-2023-38515?
CVE-2023-38515 has a severity rating of medium (5.5).
3
What is Server Side Request Forgery (SSRF)?
Server Side Request Forgery (SSRF) is a vulnerability that allows an attacker to make requests on behalf of the server.
4
What version of Church Admin Plugin is affected by CVE-2023-38515?
Church Admin Plugin versions up to and including 3.7.56 are affected by CVE-2023-38515.
5
How can I fix CVE-2023-38515?
To fix CVE-2023-38515, update the Church Admin Plugin to a version beyond 3.7.56.