Andy Moyle vulnerabilities and threats

26 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.9	EPSS 0.6%	CVE-2024-31280Church Admin (WordPress plugin) · Unrestricted File Upload Critical9.9EPSS 0.6%2024-04-07CVE Database V5CVE-2024-31280 Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5. EPSS 0.6%Vulnerability andy_moyle	CVE Database V5	2024-04-07
Medium	5.4	EPSS 0.5%	CVE-2024-30505Church Admin (WordPress plugin) · Missing Authorization Medium5.4EPSS 0.5%2024-03-29CVE Database V5CVE-2024-30505 Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18. EPSS 0.5%Vulnerability andy_moyle	CVE Database V5	2024-03-29
Medium	4.3	EPSS 0.2%	CVE-2024-30493Church Admin (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-03-29CVE Database V5CVE-2024-30493 Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.7. EPSS 0.2%Vulnerability andy_moyle	CVE Database V5	2024-03-29
High	8.5	EPSS 0.7%	CVE-2024-30244Church Admin (WordPress plugin) · SQL Injection High8.5EPSS 0.7%2024-03-28CVE Database V5CVE-2024-30244 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27. EPSS 0.7%Vulnerability andy_moyle	CVE Database V5	2024-03-28
Medium	6.5	EPSS 0.3%	CVE-2024-30193Church Admin (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-03-27CVE Database V5CVE-2024-30193 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.17. EPSS 0.3%Vulnerability andy_moyle	CVE Database V5	2024-03-27
Medium	6.5	EPSS 0.3%	CVE-2024-30197Church Admin (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.3%2024-03-27CVE Database V5CVE-2024-30197 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.26. EPSS 0.3%Vulnerability andy_moyle	CVE Database V5	2024-03-27

Page 2 of 2