Church Admin vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CA

Product

Church Admin

by andy_moyle · last CVE Oct 10, 2026

23

CVEs

0

On KEV

9.9

Max CVSS

1

New 30D

Vulnerabilities23 In the news0 Timeline

Severity mix

Critical 3High 2Medium 17Low 1

Severity

All severities23 Critical3 High2 Medium17 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Church Admin to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-39555	6.5	0%	Apr 16	WordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerability Affected: through 5.0.23
CVE-2024-30505	6.5	0%	Mar 29	WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability Affected: through 4.1.18
CVE-2026-94421	6.4	0%	Oct 10	Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter Affected: through 5.1.2
CVE-2024-31281	6.3	0%	May 17	WordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability Affected: through 4.1.6
CVE-2024-50438	6.1	0%	Oct 28	WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 5.0.0
CVE-2024-35764	5.4	0%	Jun 21	WordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability Affected: through 4.4.4
CVE-2024-30193	5.4	0%	Mar 27	WordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability Affected: through 4.1.17
CVE-2024-30197	5.4	0%	Mar 27	WordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerability Affected: through 4.0.26
CVE-2026-61983	5.3	0%	Jul 13	WordPress Church Admin plugin <= 5.0.30 - Broken Access Control vulnerability Affected: through 5.0.30
CVE-2025-57896	5.3	0%	Aug 22	WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability Affected: through 5.0.26
CVE-2024-53795	5.3	1%	Dec 6	WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability Affected: through 5.0.8
CVE-2024-35637	4.4	0%	Jun 3	WordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability Affected: through 4.3.6
CVE-2025-39553	4.3	0%	Sep 9	WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability Affected: through 5.0.9
CVE-2024-37440	4.3	0%	Nov 1	WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability Affected: through 4.4.4
CVE-2024-34828	4.3	0%	May 10	WordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 4.1.32
CVE-2024-32090	4.3	0%	Apr 15	WordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 4.0.27
CVE-2024-30493	4.3	0%	Mar 29	WordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 4.1.7