CVE-2024-30244

The Church Admin WordPress plugin (andy_moyle church-admin) is vulnerable to SQL Injection in versions 4.0.27 and earlier . The root cause is the improper neutralization of special elements used in SQL commands, specifically allowing for the injection of malicious SQL code. A practical consequenc...

WordPress Church Admin Plugin <= 4.0.27 is vulnerable to SQL Injection

Software Church Admin Type Plugin Vulnerable versions = 4.0.27 Fixed in 4.0.28 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-30244 Patch priority Medium CVSS severity Medium 8.5 Developer Andy Moyle PSID f10836385922 Credits LVT-tholv2k Required privilege Contributor...