CVE-2024-30505 WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability

Missing Authorization vulnerability in andymoyle Church Admin church-admin.This issue affects Church Admin: from n/a through = 4.1.18...

CVE-2024-30505

The Church Admin WordPress plugin (developed by Andy Moyle) is vulnerable to a Missing Authorization vulnerability, affecting versions 4.1.18 and earlier . This broken access control flaw allows for unauthorized actions within the plugin. To remediate this issue, users are advised to update to ve...

WordPress Church Admin Plugin <= 4.1.18 is vulnerable to Broken Access Control

Software Church Admin Type Plugin Vulnerable versions = 4.1.18 Fixed in 4.1.19 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-30505 Patch priority Medium CVSS severity Medium 5.4 Developer Andy Moyle PSID 4be0d3ba3cb9 Credits CatFather Required privilege...