Where
-Infinity
0

Trending

Last week
Last month
Last year

Church Admin Project Church Admin WordpressWordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)

Risk 50
Severity
7.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.29 versions.

First published (updated )
CVE-2023-34021

Church Admin Project Church Admin WordpressWordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability

Risk 34
Severity
6.5
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.

Remedy

Update to 4.4.5 or a higher version.
First published (updated )
CVE-2024-35764

WordPress Church AdminWordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability

Risk 18
Severity
4.4
EPSS
0.04%
SSRF
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N

Server-Side Request Forgery (SSRF) vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.3.6.

First published (updated )
CVE-2024-35637

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability

Risk 56
Severity
8.8
EPSS
0.04%
SQL Injection
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.

First published (updated )
CVE-2024-30244

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerability

Risk 25
Severity
6.5
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.26.

First published (updated )
CVE-2024-30197

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability

Risk 56
Severity
9.9
EPSS
0.04%
Malicious File Upload
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Unrestricted Upload of File with Dangerous Type vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5.

First published (updated )
CVE-2024-31280

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability

Risk 47
Severity
9.9
Malicious File Upload
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Unrestricted Upload of File with Dangerous Type vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6.

First published (updated )
CVE-2024-37418

Church Admin Project Church Admin WordpressWordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)

Risk 33
Severity
5.5
SSRF
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56.

Remedy

Update to 3.8.0 or a higher version.
First published (updated )
CVE-2023-38515

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability

Risk 20
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.

First published (updated )
CVE-2024-37440

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability

Risk 17
Severity
4.3
EPSS
0.04%
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.32.

First published (updated )
CVE-2024-34828

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability

Risk 17
Severity
4.3
EPSS
0.04%
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.

First published (updated )
CVE-2024-32090

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability

Risk 30
Severity
6.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6.

First published (updated )
CVE-2024-31281

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Risk 17
Severity
4.3
EPSS
0.04%
CSRF
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Cross-Site Request Forgery (CSRF) vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.7.

First published (updated )
CVE-2024-30493

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability

Risk 28
Severity
6.5
EPSS
0.04%
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18.

First published (updated )
CVE-2024-30505

Andy Moyle Church AdminWordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability

Risk 25
Severity
6.5
EPSS
0.04%
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.17.

First published (updated )
CVE-2024-30193

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203