CVE-2024-37440

CVE-2024-37440 corresponds to a Missing Authorization vulnerability in the WordPress plugin Church Admin (versions n/a through 4.4.4). The issue allows exploitation of incorrectly configured access control and is categorized with a base CVSS of 3.1/4.3 (Medium) per Patch Stack metadata, with impa...

CVE-2024-37440 WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.4...

CVE-2024-37440 WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability

Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.4...

WordPress plugin Church Admin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-27555

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions n/a through 4.4.4 Description The issue is related to a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Recommendations For versions n/a...

CVE-2024-50438

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin allows Reflected XSS.This issue affects Church Admin: from n/a through 5.0.0...

CVE-2024-50438

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Andy Moyle Church Admin allows Reflected XSS.This issue affects Church Admin: from n/a before 5.0.0...

CVE-2024-50438

The CVE-2024-50438 entry concerns a Reflected Cross-Site Scripting (XSS) vulnerability in the WordPress Church Admin plugin. Affected versions are Church Admin prior to 5.0.0. The root cause is improper neutralization of input during web page generation, enabling Reflected XSS. Multiple sources c...

CVE-2024-50438 WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin allows Reflected XSS.This issue affects Church Admin: from n/a through 5.0.0...

CVE-2024-50438 WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in andymoyle Church Admin church-admin allows Reflected XSS.This issue affects Church Admin: from n/a through 5.0.0...

WordPress plugin Church Admin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-34213 · Unknown · Church Admin

Name of the Vulnerable Software and Affected Versions: Church Admin versions prior to 5.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS. Recommendations: For versions prior ...

WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh Patchstack Alliance in WordPress Plugin Church Admin versions 5.0.0...

WordPress Church Admin Plugin < 5.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Church Admin Type Plugin Vulnerable versions 5.0.0 Fixed in 5.0.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50438 Patch priority Medium CVSS severity Medium 7.1 Developer Andy Moyle PSID 007d5118baff Credits Le Ngoc Anh Required privilege...

CVE-2024-37418

Unrestricted Upload of File with Dangerous Type vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.6...

CVE-2024-37418

Unrestricted Upload of File with Dangerous Type vulnerability in Andy Moyle Church Admin allows Upload a Web Shell to a Web Server.This issue affects Church Admin: from n/a through 4.4.6...

CVE-2024-37418 WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.6...

CVE-2024-37418 WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability

Unrestricted Upload of File with Dangerous Type vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.4.6...

PT-2024-27535

Name of the Vulnerable Software and Affected Versions Andy Moyle Church Admin versions n/a through 4.4.6 Description The issue allows an attacker to upload a web shell to a web server due to an unrestricted upload of file with dangerous type vulnerability. This enables potential remote code...

WordPress plugin Church Admin code issue vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...