PT-2024-23927 · Unknown · Andy Moyle Church Admin

Name of the Vulnerable Software and Affected Versions: Andy Moyle Church Admin versions n/a through 4.1.6 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation of incorrectly configured access control security levels. Recommendations: For versions n...

CVE-2024-34828

Cross-Site Request Forgery CSRF vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 4.1.32...

CVE-2024-34828

Cross-Site Request Forgery CSRF vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.1.32...

CVE-2024-34828

CVE-2024-34828 is a Cross-Site Request Forgery (CSRF) vulnerability in the Church Admin WordPress plugin. Multiple sources confirm the issue affects Church Admin up to version 4.1.32. The Red Hat entry and Wordfence vulnerability data describe the vulnerability as CSRF/CSRF-like, and the Church A...

CVE-2024-34828 WordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 4.1.32...

WordPress Church Admin Plugin <= 4.1.32 is vulnerable to Cross Site Request Forgery (CSRF)

Software Church Admin Type Plugin Vulnerable versions = 4.1.32 Fixed in 4.2.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-34828 Patch priority Low CVSS severity Low 4.3 Developer Andy Moyle PSID 2d0beb058c1b Credits Dhabaleshwar Das Required...

andyharman.com Cross Site Scripting vulnerability OBB-3918626

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-32090

Cross-Site Request Forgery CSRF vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 4.0.27...

CVE-2024-32090

Cross-Site Request Forgery CSRF vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.0.27...

CVE-2024-32090

CVE-2024-32090 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the WordPress plugin Church Admin (Church Admin) up to version 4.0.27. The connected Red Hat advisory and Wordfence vulnerability details confirm CSRF as the root cause and indicate affected software is Church Admin for...

WordPress Church Admin Plugin <= 4.0.27 is vulnerable to Cross Site Request Forgery (CSRF)

Software Church Admin Type Plugin Vulnerable versions = 4.0.27 Fixed in 4.0.28 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-32090 Patch priority Low CVSS severity Low 4.3 Developer Andy Moyle PSID 74fcfce5e41d Credits Dhabaleshwar Das Required...

CVE-2024-31280

Unrestricted Upload of File with Dangerous Type vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.1.5...

PT-2024-23926

Name of the Vulnerable Software and Affected Versions Church Admin versions n/a through 4.1.5 Description The issue is related to an Unrestricted Upload of File with Dangerous Type vulnerability in Andy Moyle Church Admin. This allows for the upload of files with potentially dangerous types, whic...

Internet Bug Bounty: CVE-2019-1551: rsaz_512_sqr overflow bug on x86_64

The CVE-2019-1551 vulnerability was an overflow bug in the x6464 Montgomery squaring procedure used in exponentiation with 512-bit moduli in the OpenSSL library. The vulnerability was found and reported by researchers. The issue was mitigated in the 1.1.1 and 1.0.2 versions of OpenSSL...

VulnCheck KEV: CVE-2024-31281

Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.1.6...

CVE-2024-30505

Missing Authorization vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 4.1.18...

CVE-2024-30493

Cross-Site Request Forgery CSRF vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.1.7...

CVE-2024-30493

Cross-Site Request Forgery CSRF vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 4.1.7...

CVE-2024-30505

CVE-2024-30505 is a Missing Authorization vulnerability affecting WordPress Church Admin plugin. Affected versions are Church Admin: n/a through 4.1.18. Reported in connected RH documentation; CVSS v3.1 base score 5.4 (Medium). The issue stems from missing authorization checks, enabling unauthori...

CVE-2024-30493 WordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 4.1.7...