churchadminplugin records

3 published records for vendor churchadminplugin.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2018-20971No exploit	The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.churchadminplugin · church admin · CWE-352 Pre-auth CSRF	High8.8	—	0.6%	Aug 16, 2019
24Monitor	CVE-2023-30782No exploit	WordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)churchadminplugin · church admin · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Aug 16, 2023
21Monitor	CVE-2024-53795No exploit	WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerabilityandy_moyle · church admin · CWE-862 Pre-auth Broken access control (IDOR) Denial of service	Medium5.3	—	0.6%	Dec 6, 2024

CVE-2018-20971
35Monitor
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- CSRF
churchadminplugin · church adminAug 16, 2019
CVE-2023-30782
24Monitor
WordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
churchadminplugin · church adminAug 16, 2023
CVE-2024-53795
21Monitor
WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability
MediumCVSS 5.3No exploitEPSS 1%
andy_moyle · church adminDec 6, 2024