CVE-2024-32090: WordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability
Published Apr 15, 2024
·Updated
Cross-Site Request Forgery (CSRF) vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.
Affected Software
3 affected components
Andy Moyle Church Admin<=4.0.27
WordPress Church Admin plugin<=4.0.27
Church Admin Project Church Admin Wordpress<4.1.28
Remediation
Event History
Apr 15, 2024
CVE Published
via MITRE·09:02 AM
Data Sourced
via MITRE·09:02 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-32090?
The severity of CVE-2024-32090 is classified as high due to its Cross-Site Request Forgery (CSRF) nature.
2
How do I fix CVE-2024-32090?
To fix CVE-2024-32090, update Andy Moyle Church Admin to a version higher than 4.0.27.
3
What versions are affected by CVE-2024-32090?
CVE-2024-32090 affects Andy Moyle Church Admin versions up to and including 4.0.27.
4
What type of vulnerability is CVE-2024-32090?
CVE-2024-32090 is a Cross-Site Request Forgery (CSRF) vulnerability.
5
Who is impacted by CVE-2024-32090?
Users of Andy Moyle Church Admin and its WordPress Church Admin plugin versions up to 4.0.27 are impacted by CVE-2024-32090.