Church Admin < 4.1.19 - Missing Authorization

2024-04-0300:00:00

wpscan.com

church admin

wordpress

unauthorized access

vulnerability

capability check

authenticated attackers

subscriber-level access

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.7%

JSON

Description The Church Admin plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in versions up to, and including, 4.1.18. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform unauthorized actions.