991 matches found
cve-2021-3164
Church Rota version 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file. After logging into Church Rota, send the following request, replacing with your PHPSESSID: POST...
CVE-2026-94421
The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2026-94421
The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 5.1.2 . The flaw exists because of insufficient input sanitization and output escaping associated with the 'email' parameter . An authenticated attacker with Subscriber-level a...
EUVD-2026-96100
The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2026-94421 Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter
The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2026-94421 Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter
The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and...
PT-2026-109542
Name of the Vulnerable Software and Affected Versions Church Admin plugin for WordPress versions prior to 5.1.3 Description Insufficient input sanitization and output escaping allow authenticated attackers with subscriber-level access and above to perform Stored Cross-Site Scripting. This is...
CVE-2026-94421: Improper Neutralization of Input During Web Page Generation
The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and...
WordPress Church Admin plugin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting vulnerability
Authenticated Subscriber+ Stored Cross-Site Scripting vulnerability discovered by 刀 妖 in WordPress Plugin Church Admin versions = 5.1.2...
ICE Wants to Know Everyone Who Bought a Certain Green Beanie From REI in the Last 2 Years
Homeland Security Investigations agents hit the outdoor retailer with a controversial subpoena as part of a dragnet search for the identities of protesters who entered a Minnesota church in March...
CVE-2026-66478
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
CVE-2026-66478
The CVE 2026-66478 refers to an unauthenticated SQL Injection in the WordPress plugin Church Admin (versions
CVE-2026-66478 WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
CVE-2026-66478 WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
CVE-2026-66478
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
EUVD-2026-57891
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
CVE-2026-66478: Improper Neutralization of Special Elements used in an SQL Command
Unauthenticated SQL Injection in Church Admin = 5.1.1 versions...
WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Zainul Anwar Adi Putra in WordPress Plugin Church Admin versions = 5.1.1...
PT-2026-71578
Name of the Vulnerable Software and Affected Versions Church Admin versions prior to 5.1.2 Description The Church Admin plugin for WordPress contains a flaw allowing unauthenticated attackers to execute SQL Injection. This occurs due to insufficient escaping of user-supplied parameters and a lack...