Lucene search
+L

71 matches found

Patchstack
Patchstack
added 2023/06/13 12:00 a.m.17 views

WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)

Software Church Admin Type Plugin Vulnerable versions = 3.7.29 Fixed in 3.7.30 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-34021 Patch priority Medium CVSS severity Medium 7.1 Developer Andy Moyle PSID 57d5d23230bd Credits Phd Required privilege...

7.1CVSS5.6AI score0.00382EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
added 2023/04/18 12:00 a.m.11 views

WordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)

Software Church Admin Type Plugin Vulnerable versions = 3.7.5 Fixed in 3.7.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30782 Patch priority Medium CVSS severity Medium 7.1 Developer Andy Moyle PSID 7ffc0d962f6f Credits Le Ngoc Anh Required...

7.1CVSS5.9AI score0.00382EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2022/03/30 12:00 a.m.18 views

WordPress Church Admin plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site request forgery vulnerability exists in the...

4.3CVSS6.4AI score0.00494EPSS
SaveExploits2References1
OSV
OSV
added 2022/03/28 6:15 p.m.6 views

CVE-2022-0833

The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action, and simultaneously keep requesting a publicly accessible temporary file...

4.3CVSS5.7AI score0.00494EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2022/03/28 12:00 a.m.11 views

WordPress plugin Church Admin 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site request forgery vulnerability exists in the...

4.3CVSS5.5AI score0.00494EPSS
SaveExploits2References2
NVD
NVD
added 2019/08/16 9:15 p.m.16 views

CVE-2018-20971

The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...

8.8CVSS8.8AI score0.00649EPSS
SaveExploits0References1
Prion
Prion
added 2019/08/16 9:15 p.m.19 views

Cross site request forgery (csrf)

The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...

6.8CVSS8.7AI score0.00649EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2019/08/16 8:21 p.m.19 views

CVE-2018-20971

The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...

8.9AI score0.00649EPSS
SaveExploits0References1
WPVulnDB
WPVulnDB
added 2018/02/14 12:00 a.m.68 views

Church Admin < 1.2550 - CSRF

The Church Admin WordPress plugin was affected by a CSRF security vulnerability...

6.8CVSS2.7AI score0.00649EPSS
SaveExploits0Affected Software1
Prion
Prion
added 2015/05/28 2:59 p.m.18 views

Cross site scripting

Cross-site scripting XSS vulnerability in the churchadmin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to index.php/2015/05/21/churchadmin-registration-form/...

4.3CVSS6.2AI score0.07495EPSS
SaveExploits2References5Affected Software1
Patchstack
Patchstack
added 2014/08/01 12:00 a.m.13 views

WordPress Church Admin Plugin <= 0.33.4.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in includes/validate.php id parameter. Solution Update the plugin...

1.9AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder