205 matches found
CVE-2024-30197
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.0.26...
CVE-2024-24702
Cross-Site Request Forgery CSRF vulnerability in Matt Martz & Andy Stratton Page Restrict.This issue affects Page Restrict: from n/a through 2.5.5...
CVE-2023-38515
Server-Side Request Forgery SSRF vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56...
CVE-2025-31780
CVE-2025-31780 is a Missing Authorization vulnerability in the WordPress plugin Append Content, exposing risk due to misconfigured access control. Affected range: from n/a to 2.1.1. CVSS v3.1 base score 6.5 (Network attack, Low/None for confidentiality, Availability; I: Low, A: Low). No exploit d...
CVE-2025-31780: Missing Authorization
Missing Authorization vulnerability in Andy Stratton Append Content append-content allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Append Content: from n/a through = 2.1.1...
PT-2025-14166 · Unknown · Andy Stratton Append Content
Name of the Vulnerable Software and Affected Versions: Andy Stratton Append Content versions n/a through 2.1.1 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions n...
CVE-2025-26941 WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in andymoyle Church Admin church-admin allows SQL Injection.This issue affects Church Admin: from n/a through = 5.0.18...
CVE-2025-26941 WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in andymoyle Church Admin church-admin allows SQL Injection.This issue affects Church Admin: from n/a through = 5.0.18...
CVE-2024-56256: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Andy Fragen Embed PDF Viewer embed-pdf-viewer.This issue affects Embed PDF Viewer: from n/a through = 2.3.1...
Meet Andy Zollo, SVP of APJ Sales
Andy Zollo, who led the Imperva business in EMEA, relocated to Singapore in October to be Senior Vice President of Sales for the combined Imperva and Thales CPL businesses in the APJ region. With a wealth of experience in sales leadership and business transformation, Andy is set to play a vital...
CVE-2024-37440
Missing Authorization vulnerability in Andy Moyle Church Admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through 4.4.4...
CVE-2024-37440
CVE-2024-37440 corresponds to a Missing Authorization vulnerability in the WordPress plugin Church Admin (versions n/a through 4.4.4). The issue allows exploitation of incorrectly configured access control and is categorized with a base CVSS of 3.1/4.3 (Medium) per Patch Stack metadata, with impa...
CVE-2024-37440 WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.4...
CVE-2024-50438
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin allows Reflected XSS.This issue affects Church Admin: from n/a through 5.0.0...
CVE-2024-50438
The CVE-2024-50438 entry concerns a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress Church Admin plugin. Affected versions are Church Admin prior to 5.0.0. The root cause is improper neutralization of input during web page generation, enabling Reflected XSS. Multiple sources c...
CVE-2024-50438 WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin allows Reflected XSS.This issue affects Church Admin: from n/a through 5.0.0...
Exploit for CVE-2023-22098
CVE-2023-22098 - Oracle VM VirtualBox 7.0.10 r158379 Escape H...
CVE-2024-37418
Unrestricted Upload of File with Dangerous Type vulnerability in Andy Moyle Church Admin allows Upload a Web Shell to a Web Server.This issue affects Church Admin: from n/a through 4.4.6...
WordPress Church Admin Plugin <= 4.4.6 is vulnerable to Arbitrary File Upload
Software Church Admin Type Plugin Vulnerable versions = 4.4.6 Fixed in 4.4.7 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2024-37418 Patch priority High CVSS severity High 9.9 Developer Andy Moyle PSID 3fae9e77c92b Credits Peng Zhou Required privilege Subscriber Publish...