Skip to content
OpenAdvisories

Vendor

andy_moyle

29 known vulnerabilities.

andy_moyle at a glance

Last 12 months
6
Critical · all time
4
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 1 vulnerability February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 1 vulnerability Jun July 2026: 1 vulnerability August 2026: 1 vulnerability, 1 critical September 2026: 0 vulnerabilities Sep October 2026: 1 vulnerability November 2026: 1 vulnerability
Show as table
MonthVulnerabilitiesCritical
Nov 202610
Oct 202610
Sep 202600
Aug 202611
Jul 202610
Jun 202610
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202610
Dec 202500
Nov 202500
Oct 202500
Sep 202520
Aug 202510
Jul 202500
Jun 202500
May 202500
Apr 202510
Mar 202511
Feb 202500
Jan 202500
Dec 202410

Products

Church Admin 27 Emergency Password Reset 2
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • High 7.2
    CVE-2026-123418

    Church Admin <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'lat' Parameter

    The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'lat' parameter in all versions up to, and including, 5.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attac…

    andy_moyle Church Admin Web / CMS
  • Medium 6.4
    CVE-2026-94421

    Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter

    The Church Admin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'email' parameter in all versions up to, and including, 5.1.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac…

    andy_moyle Church Admin Web / CMS
  • Critical 9.3
    CVE-2026-66478

    WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability

    Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.

    andy_moyle Church Admin
  • Medium 5.3
    CVE-2026-61983

    WordPress Church Admin plugin <= 5.0.30 - Broken Access Control vulnerability

    Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.30.

    andy_moyle Church Admin
  • Medium 4.3
    CVE-2024-35648

    WordPress Emergency Password Reset plugin <= 8.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site request forgery (CSRF) vulnerability in Andy Moyle Emergency Password Reset allows Cross Site Request Forgery. This issue affects Emergency Password Reset: from n/a through 8.0.

    andy_moyle Emergency Password Reset
  • Low 2.2
    CVE-2026-0682

    Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter

    The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.28 due to insufficient validation of user-supplied URLs in the 'audio_url' parameter. This makes it possible for authenticated attacke…

    andy_moyle Church Admin Web / CMS
  • Medium 4.3
    CVE-2025-57942

    WordPress Emergency Password Reset plugin <= 9.3 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Emergency Password Reset emergency-password-reset allows Cross Site Request Forgery.This issue affects Emergency Password Reset: from n/a through <= 9.3.

    andy_moyle Emergency Password Reset
  • Medium 4.3
    CVE-2025-39553

    WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability

    Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 5.0.9.

    andy_moyle Church Admin
  • Medium 5.3
    CVE-2025-57896

    WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.26.

    andy_moyle Church Admin
  • Medium 6.5
    CVE-2025-39555

    WordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin allows Stored XSS.This issue affects Church Admin: from n/a through <= 5.0.23.

    andy_moyle Church Admin
  • Critical 9.3
    CVE-2025-26941

    WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin allows SQL Injection.This issue affects Church Admin: from n/a through <= 5.0.18.

    andy_moyle Church Admin
  • Medium 5.3
    CVE-2024-53795

    WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability

    Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Church Admin: from n/a through <= 5.0.8.

    andy_moyle Church Admin
  • Medium 4.3
    CVE-2024-37440

    WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.

    andy_moyle Church Admin
  • High 7.1
    CVE-2024-50438

    WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin allows Reflected XSS.This issue affects Church Admin: from n/a through < 5.0.0.

    andy_moyle Church Admin
  • Critical 9.9
    CVE-2024-37418

    WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6.

    andy_moyle Church Admin
  • Medium 6.5
    CVE-2024-35764

    WordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.

    andy_moyle Church Admin
  • Medium 4.4
    CVE-2024-35637

    WordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.3.6.

    andy_moyle Church Admin
  • Medium 6.3
    CVE-2024-31281

    WordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6.

    andy_moyle Church Admin
  • Medium 4.3
    CVE-2024-34828

    WordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.32.

    andy_moyle Church Admin
  • Medium 4.3
    CVE-2024-32090

    WordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.

    andy_moyle Church Admin
  • Critical 9.9
    CVE-2024-31280

    WordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability

    Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5.

    andy_moyle Church Admin
  • Medium 5.4
    CVE-2024-30505

    WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability

    Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18.

    andy_moyle Church Admin
  • Medium 4.3
    CVE-2024-30493

    WordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.7.

    andy_moyle Church Admin
  • High 8.5
    CVE-2024-30244

    WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.

    andy_moyle Church Admin
  • Medium 6.5
    CVE-2024-30193

    WordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.17.

    andy_moyle Church Admin
  • Medium 6.5
    CVE-2024-30197

    WordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.26.

    andy_moyle Church Admin
  • Medium 5.5
    CVE-2023-38515

    WordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)

    Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56.

    andy_moyle Church Admin
  • High 7.1
    CVE-2023-30782

    WordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.5 versions.

    andy_moyle Church Admin
  • High 7.1
    CVE-2023-34021

    WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)

    Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.29 versions.

    andy_moyle Church Admin