VendorsChurch Admin Projectchurch_adminany version
Vulnerabilities

Church Admin Project Church Admin any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

17CVEs
CVE-2024-31280
WordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability
Published 2024-04-07 · Modified
9.9EPSS 0.006
CVE-2024-37418
WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability
Published 2024-07-09 · Modified
9.9EPSS 0.005
CVE-2024-30244
WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability
Published 2024-03-28 · Modified
8.8EPSS 0.007
CVE-2023-34021
WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)
Published 2023-06-23 · Modified
7.1EPSS 0.004
CVE-2024-30505
WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability
Published 2024-03-29 · Modified
6.5EPSS 0.005
CVE-2024-30193
WordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability
Published 2024-03-27 · Modified
6.5EPSS 0.003
CVE-2024-30197
WordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-27 · Modified
6.5EPSS 0.003
CVE-2024-35764
WordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability
Published 2024-06-21 · Modified
6.5EPSS 0.003
CVE-2024-31281
WordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability
Published 2024-05-17 · Modified
6.3EPSS 0.003
CVE-2023-38515
WordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)
Published 2023-11-13 · Modified
5.5EPSS 0.005
CVE-2024-35637
WordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability
Published 2024-06-03 · Modified
4.4EPSS 0.002
CVE-2015-4127
Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to index.php/2015/05/21/church_admin-registration-form/.
Published 2015-05-28 · Modified
4.31 PoCEPSS 0.074
CVE-2022-0833
Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure
Published 2022-03-28 · Modified
4.3EPSS 0.005
CVE-2024-37440
WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability
Published 2024-11-01 · Modified
4.3EPSS 0.003
CVE-2024-34828
WordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-05-10 · Modified
4.3EPSS 0.003
CVE-2024-32090
WordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-04-15 · Modified
4.3EPSS 0.002
CVE-2024-30493
WordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-03-29 · Modified
4.3EPSS 0.002