CVE-2024-30505

CVE-2024-30505 is a Missing Authorization vulnerability affecting WordPress Church Admin plugin. Affected versions are Church Admin: n/a through 4.1.18. Reported in connected RH documentation; CVSS v3.1 base score 5.4 (Medium). The issue stems from missing authorization checks, enabling unauthori...

CVE-2024-30505 WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.1.18...

WordPress Church Admin Plugin <= 4.1.18 is vulnerable to Broken Access Control

Software Church Admin Type Plugin Vulnerable versions = 4.1.18 Fixed in 4.1.19 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30505 Patch priority Medium CVSS severity Medium 5.4 Developer Andy Moyle PSID 4be0d3ba3cb9 Credits CatFather Required privilege...