CVE-2025-26941

creationtimestamp| type| source ---|---|--- 2025-03-26 15:40:16+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llc4npll5q2v...

CVE-2025-26941

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in andymoyle Church Admin church-admin allows SQL Injection.This issue affects Church Admin: from n/a through = 5.0.18...

CVE-2025-26941

CVE-2025-26941 is a SQL Injection vulnerability affecting the WordPress Church Admin plugin (versions up to and including 5.0.18). The issue arises from improper neutralization of special elements used in an SQL command, enabling an attacker to potentially access or exfiltrate data. Documented im...