CVE-2022-0499

Summary: CVE-2022-0499 affects the WordPress plugin Sermon Browser, versions ≤ 0.45.22. The issue, as described in multiple sources, is that the plugin lacks CSRF protection and does not validate uploaded Sermon files, allowing a logged-in admin to upload arbitrary files such as PHP scripts. Deta...

CVE-2016-10897

CVE-2016-10897 corresponds to the WordPress Sermon Browser plugin prior to version 0.45.16, which has multiple XSS vulnerabilities affecting the plugin’s input handling. The affected component is the sermon-browser WordPress plugin itself. Root cause details are not elaborated in the connected do...