Skip to content
OpenAdvisories

Vendor

andy_moyle

29 known vulnerabilities.

Products

Church Admin 27 Emergency Password Reset 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.2
    CVE-2026-0682

    Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter

    The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.28 due to insufficient validation of user-supplied URLs in the 'audio_url' parameter. This makes it possible for authenticated attacke…

    andy_moyle Church Admin Web / CMS