church_admin_project Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

church_admin5 vulnerabilities

church_admin_project vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2024-37418CRITICAL	WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6. CWE-434Jul 9, 2024	CVSS9.9v3.1	EPSS0.537%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-31281MEDIUM	WordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6. CWE-862May 17, 2024	CVSS6.3v3.1	EPSS0.342%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-31280CRITICAL	WordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5. CWE-434Apr 7, 2024	CVSS9.9v3.1	EPSS0.625%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-30505MEDIUM	WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18. CWE-862Mar 29, 2024	CVSS5.4v3.1	EPSS0.468%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2024-30244HIGH	WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27. CWE-89Mar 28, 2024	CVSS8.5v3.1	EPSS0.659%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX