WordPress Plugin Vulnerabilities

Church Admin <= 0.4.2 - Cross-Site Scripting (XSS)

Description

The Church Admin WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
church-admin
Fixed in 0.4.3

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
f573ca10-6a07-401a-b98b-85bfa328fab2

Timeline

Publicly Published
2014-08-01 (about 9 years ago)
Added
2014-08-01 (about 9 years ago)
Last Updated
2018-01-10 (about 6 years ago)

Other

Published
Title
Published
2023-02-20
Title
Visualizer < 3.9.5 - Contributor+ Stored XSS
Published
2023-12-26
Title
Google Photos Gallery with Shortcodes < 4.0.3 - Reflected Cross-Site Scripting
Published
2022-10-24
Title
Traffic Manager <= 1.4.5 - Subscriber+ Stored Cross-Site Scripting
Published
2024-02-06
Title
Starbox < 3.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Job Settings
Published
2023-11-07
Title
Forms for Mailchimp by Optin Cat < 2.5.5 - Authenticated (Editor+) Stored Cross-Site Scripting