Known vulnerabilities in the Church Admin plugin
28 security advisories have been published for the Church Admin plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Church Admin - SQL Injection (CVE-2026-66478) CRITICAL
- Church Admin - Broken Access Control (CVE-2026-61983) MEDIUM
- Church Admin - Server-Side Request Forgery (SSRF) (CVE-2026-0682) LOW
- Church Admin - Broken Access Control (CVE-2025-39553) MEDIUM
- Church Admin - Broken Access Control (CVE-2025-57896) MEDIUM
- Church Admin - Cross-Site Scripting (XSS) (CVE-2025-39555) MEDIUM
- Church Admin - SQL Injection (CVE-2025-26941) CRITICAL
- Church Admin - Broken Access Control (CVE-2024-53795) MEDIUM
- Church Admin - Broken Access Control (CVE-2024-37440) MEDIUM
- Church Admin - Cross-Site Scripting (XSS) (CVE-2024-50438) HIGH
- Church Admin - Arbitrary File Upload (CVE-2024-37418) CRITICAL
- Church Admin - Cross-Site Scripting (XSS) (CVE-2024-35764) MEDIUM
- Church Admin - Server-Side Request Forgery (SSRF) (CVE-2024-35637) MEDIUM
- Church Admin - Broken Access Control (CVE-2024-31281) MEDIUM
- Church Admin - Cross-Site Request Forgery (CSRF) (CVE-2024-34828) MEDIUM
- Church Admin - Cross-Site Request Forgery (CSRF) (CVE-2024-32090) MEDIUM
- Church Admin - Arbitrary File Upload (CVE-2024-31280) CRITICAL
- Church Admin - Broken Access Control (CVE-2024-30505) MEDIUM
- Church Admin - Cross-Site Request Forgery (CSRF) (CVE-2024-30493) MEDIUM
- Church Admin - SQL Injection (CVE-2024-30244) HIGH
- Church Admin - Cross-Site Scripting (XSS) (CVE-2024-30197) MEDIUM
- Church Admin - Cross-Site Scripting (XSS) (CVE-2024-30193) MEDIUM
- Church Admin - Server-Side Request Forgery (SSRF) (CVE-2023-38515) MEDIUM
- Church Admin - Cross-Site Scripting (XSS) (CVE-2023-30782) HIGH
- Church Admin - Cross-Site Scripting (XSS) (CVE-2023-34021) HIGH
- Church Admin - Cross-Site Request Forgery (CSRF) (CVE-2022-0833) MEDIUM
- Church Admin - Cross-Site Request Forgery (CSRF) (CVE-2018-20971) HIGH
- Church Admin - Cross-Site Scripting (XSS) (CVE-2015-4127) MEDIUM