WordPress plugin Church Admin 安全漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site request forgery vulnerability exists in the...

Church Admin < 3.4.135 - Unauthenticated Plugin's Backup Disclosure

The plugin does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action, and simultaneously keep requesting a publicly accessible temporary file generated by the plugin in order to...

WordPress Church Admin plugin <= 3.4.134 - Unauthenticated Plugin's Backup Disclosure vulnerability

Unauthenticated Plugin's Backup Disclosure vulnerability discovered by cydave in WordPress Church Admin plugin versions = 3.4.134. Solution Update the WordPress Church Admin plugin to the latest available version at least 3.4.135...

CVE-2018-20971

The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...

Cross site request forgery (csrf)

The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...

CVE-2018-20971

The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan...

CVE-2018-20971

CVE-2018-20971 affects the WordPress plugin “church-admin” prior to version 1.2550. The vulnerability is a Cross-Site Request Forgery (CSRF) that targets the upload of a bible reading plan. Public sources in the connected documents corroborate the issue as a CSRF in the plugin affecting uploads; ...

Church Admin < 1.2550 - CSRF

The Church Admin WordPress plugin was affected by a CSRF security vulnerability...

WordPress Church Admin plugin <=0.564 - Unauthenticated Directory Traversal vulnerability

Unauthenticated Directory Traversal vulnerability found in WordPress Church Admin plugin versions =0.564. Solution Update the WordPress Church Admin plugin to the latest available version at least 0.565...

Church Admin 0.33.2.1 - Unauthenticated Directory Traversal

The "key" parameter of download.php from plugins/church-admin/display/download.php is not sanitized and is vulnerable to a directory traversal type of attack. http:///wp-content/plugins/church-admin/display/download.php?key=../../../../../../../etc/passwd...

Church Admin 0.33.2.1 - Unauthenticated Directory Traversal

The "key" parameter of download.php from plugins/church-admin/display/download.php is not sanitized and is vulnerable to a directory traversal type of attack. PoC http:///wp-content/plugins/church-admin/display/download.php?key=../../../../../../../etc/passwd...

Cross site scripting

Cross-site scripting XSS vulnerability in the churchadmin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to index.php/2015/05/21/churchadmin-registration-form/...

WordPress Church Admin Plugin 0.800 - Stored XSS

Better Church Admin plugins is prone to a stored XSS vulnerability that allow to steal cookies or gain privileged access to the affected site. Solution Fixed in version 0.810...

WordPress Church Admin 0.800 Cross Site Scripting

Exploit Title: Wordpress churchadmin Stored XSS Date: 21-04-2015 Exploit Author: woodspeed Vendor Homepage: https://wordpress.org/plugins/church-admin/ Version: 0.800 OSVDB ID : http://www.osvdb.org/show/osvdb/121304 WPVULNDB ID : https://wpvulndb.com/vulnerabilities/7999 Category: webapps 1...

Wordpress Plugin Church Admin XSS Vulnerability

Exploit for windows platform in category web applications Exploit Title: Wordpress Plugin Church Admin XSS Vulnerability Date: 2015-03-06 Google Dork : inurl:wp-content\uploads\sermons Exploit Author: CrashBandicot Vendor Homepage: https://wordpress.org/plugins/church-admin/ Tested on: Chrome Go...

Church Admin <= 0.4.2 - Cross-Site Scripting (XSS)

The Church Admin WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

WordPress Church Admin Plugin <= 0.33.4.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability in includes/validate.php id parameter. Solution Update the plugin...

WordPress Plugin church_admin - id Cross-Site Scripting

WordPress Plugin churchadmin - id Cross-Site Scripting source: https://www.securityfocus.com/bid/54329/info The churchadmin plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execu...

WordPress Church Admin Plugin - Cross Site Scripting

WordPress ChurchAdmin plugin's "id" parameter is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...