Skip to contentAndy Moyle Church Admin vulnerabilities
- andy moyle church adminChurch Admin <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'lat' ParameterCVE-2026-1234187.2 High
- andy moyle church adminChurch Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' ParameterCVE-2026-944216.4 Medium
- andy moyle church adminWordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerabilityCVE-2026-664789.3 Critical
- andy moyle church adminWordPress Church Admin plugin <= 5.0.30 - Broken Access Control vulnerabilityCVE-2026-619835.3 Medium
- andy moyle church adminChurch Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' ParameterCVE-2026-06822.2 Low
- andy moyle church adminWordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerabilityCVE-2025-395534.3 Medium
- andy moyle church adminWordPress Church Admin Plugin <= 5.0.26 - Broken Access Control VulnerabilityCVE-2025-578965.3 Medium
- andy moyle church adminWordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-395556.5 Medium
- andy moyle church adminWordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerabilityCVE-2025-269419.3 Critical
- andy moyle church adminWordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerabilityCVE-2024-537955.3 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerabilityCVE-2024-374404.3 Medium
- andy moyle church adminWordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-504387.1 High
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerabilityCVE-2024-374189.9 Critical
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-357646.5 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerabilityCVE-2024-356374.4 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerabilityCVE-2024-312816.3 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-348284.3 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-320904.3 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerabilityCVE-2024-312809.9 Critical
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerabilityCVE-2024-305055.4 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2024-304934.3 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerabilityCVE-2024-302448.5 High
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2024-301936.5 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-301976.5 Medium
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)CVE-2023-385155.5 Medium
- andy moyle church adminWordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)CVE-2023-307827.1 High
- andy moyle church admin, church admin project admin +1 moreWordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)CVE-2023-340217.1 High
- andy moyle church admin, church admin project admin +1 moreChurch Admin < 3.4.135 - Unauthenticated Plugin's Backup DisclosureCVE-2022-08334.3 Medium