Login Request a demo
CA
Product
Church Admin
by andy_moyle · last CVE Oct 10, 2026
13
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 3High 0Medium 9Low 1
Severity
All severities13Critical3High0Medium9Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Church Admin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-37418
9.9
1%
Jul 9
WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability
Affected: through 4.4.6
CVE-2026-66478
9.3
0%
Aug 13
WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability
Affected: through 5.1.1
CVE-2025-26941
9.3
1%
Mar 26
WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability
Affected: through 5.0.18
CVE-2025-39555
6.5
0%
Apr 16
WordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.0.23
CVE-2026-94421
6.4
0%
Oct 10
Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter
Affected: through 5.1.2
CVE-2024-50438
6.1
0%
Oct 28
WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 5.0.0
CVE-2024-35764
5.4
0%
Jun 21
WordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability
Affected: through 4.4.4
CVE-2026-61983
5.3
0%
Jul 13
WordPress Church Admin plugin <= 5.0.30 - Broken Access Control vulnerability
Affected: through 5.0.30
CVE-2025-57896
5.3
0%
Aug 22
WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability
Affected: through 5.0.26
CVE-2024-53795
5.3
1%
Dec 6
WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability
Affected: through 5.0.8
CVE-2025-39553
4.3
0%
Sep 9
WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability
Affected: through 5.0.9
CVE-2024-37440
4.3
0%
Nov 1
WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability
Affected: through 4.4.4
CVE-2026-0682
2.2
0%
Jan 17
Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter
Affected: through 5.0.28
Showing 13