# andy_moyle Church Admin.

Every CVE that names andy_moyle Church Admin among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Church Admin <= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'lat' Parameter](https://agentprime.io/advisories/CVE-2026-123418.md)
  `CVE-2026-123418` · CVE record: andy_moyle Church Admin · CVSS 7.2 High · Not analysed yet · Published 7 Nov 2026 · Tags: Cross-site scripting (XSS)
- [Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter](https://agentprime.io/advisories/CVE-2026-94421.md)
  `CVE-2026-94421` · CVE record: andy_moyle Church Admin · CVSS 6.4 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Cross-site scripting (XSS)
- [WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2026-66478.md)
  `CVE-2026-66478` · CVE record: andy_moyle Church Admin · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2026 · Tags: SQL injection
- [WordPress Church Admin plugin <= 5.0.30 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2026-61983.md)
  `CVE-2026-61983` · CVE record: andy_moyle Church Admin · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Broken access control
- [Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter](https://agentprime.io/advisories/CVE-2026-0682.md)
  `CVE-2026-0682` · CVE record: andy_moyle Church Admin · CVSS 2.2 Low · Not analysed yet · Published 17 Jan 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability](https://agentprime.io/advisories/CVE-2025-39553.md)
  `CVE-2025-39553` · CVE record: andy_moyle Church Admin · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Broken access control
- [WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability](https://agentprime.io/advisories/CVE-2025-57896.md)
  `CVE-2025-57896` · CVE record: andy_moyle Church Admin · CVSS 5.3 Medium · Not analysed yet · Published 22 Aug 2025 · Tags: Broken access control
- [WordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2025-39555.md)
  `CVE-2025-39555` · CVE record: andy_moyle Church Admin · CVSS 6.5 Medium · Not analysed yet · Published 16 Apr 2025 · Tags: Cross-site scripting (XSS)
- [WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability](https://agentprime.io/advisories/CVE-2025-26941.md)
  `CVE-2025-26941` · CVE record: andy_moyle Church Admin · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 26 Mar 2025 · Tags: SQL injection
- [WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-53795.md)
  `CVE-2024-53795` · CVE record: andy_moyle Church Admin · CVSS 5.3 Medium · Not analysed yet · Published 6 Dec 2024 · Tags: Broken access control
- [WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-37440.md)
  `CVE-2024-37440` · CVE record: andy_moyle Church Admin · CVSS 4.3 Medium · Not analysed yet · Published 1 Nov 2024 · Tags: Broken access control
- [WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-50438.md)
  `CVE-2024-50438` · CVE record: andy_moyle Church Admin · CVSS 7.1 High · Not analysed yet · Published 28 Oct 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2024-37418.md)
  `CVE-2024-37418` · CVE record: andy_moyle Church Admin · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jul 2024 · Tags: Unrestricted file upload
- [WordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-35764.md)
  `CVE-2024-35764` · CVE record: andy_moyle Church Admin · CVSS 6.5 Medium · Not analysed yet · Published 21 Jun 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2024-35637.md)
  `CVE-2024-35637` · CVE record: andy_moyle Church Admin · CVSS 4.4 Medium · Not analysed yet · Published 3 Jun 2024 · Tags: Server-side request forgery (SSRF)
- [WordPress Church Admin plugin <= 4.1.6 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-31281.md)
  `CVE-2024-31281` · CVE record: andy_moyle Church Admin · CVSS 6.3 Medium · Not analysed yet · Published 17 May 2024 · Tags: Broken access control
- [WordPress Church Admin plugin <= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2024-34828.md)
  `CVE-2024-34828` · CVE record: andy_moyle Church Admin · CVSS 4.3 Medium · Not analysed yet · Published 10 May 2024 · Tags: Cross-site request forgery (CSRF)
- [WordPress Church Admin plugin <= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2024-32090.md)
  `CVE-2024-32090` · CVE record: andy_moyle Church Admin · CVSS 4.3 Medium · Not analysed yet · Published 15 Apr 2024 · Tags: Cross-site request forgery (CSRF)
- [WordPress Church Admin plugin <= 4.1.5 - Arbitrary File Upload vulnerability](https://agentprime.io/advisories/CVE-2024-31280.md)
  `CVE-2024-31280` · CVE record: andy_moyle Church Admin · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Apr 2024 · Tags: Unrestricted file upload
- [WordPress Church Admin plugin <= 4.1.18 - Broken Access Control vulnerability](https://agentprime.io/advisories/CVE-2024-30505.md)
  `CVE-2024-30505` · CVE record: andy_moyle Church Admin · CVSS 5.4 Medium · Not analysed yet · Published 29 Mar 2024 · Tags: Broken access control
- [WordPress Church Admin plugin <= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability](https://agentprime.io/advisories/CVE-2024-30493.md)
  `CVE-2024-30493` · CVE record: andy_moyle Church Admin · CVSS 4.3 Medium · Not analysed yet · Published 29 Mar 2024 · Tags: Cross-site request forgery (CSRF)
- [WordPress Church Admin plugin <= 4.0.27 - SQL Injection via shortcode vulnerability](https://agentprime.io/advisories/CVE-2024-30244.md)
  `CVE-2024-30244` · CVE record: andy_moyle Church Admin · CVSS 8.5 High · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [WordPress Church Admin plugin <= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-30193.md)
  `CVE-2024-30193` · CVE record: andy_moyle Church Admin · CVSS 6.5 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Church Admin plugin <= 4.0.26 - Cross Site Scripting (XSS) vulnerability](https://agentprime.io/advisories/CVE-2024-30197.md)
  `CVE-2024-30197` · CVE record: andy_moyle Church Admin · CVSS 6.5 Medium · Not analysed yet · Published 27 Mar 2024 · Tags: Cross-site scripting (XSS)
- [WordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2023-38515.md)
  `CVE-2023-38515` · CVE record: Andy Moyle Church Admin · CVSS 5.5 Medium · Not analysed yet · Published 13 Nov 2023 · Tags: Server-side request forgery (SSRF)
- [WordPress Church Admin Plugin <= 3.7.5 is vulnerable to Cross Site Scripting (XSS)](https://agentprime.io/advisories/CVE-2023-30782.md)
  `CVE-2023-30782` · CVE record: Andy Moyle Church Admin · CVSS 7.1 High · Not analysed yet · Published 16 Aug 2023 · Tags: Cross-site scripting (XSS)
- [WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS)](https://agentprime.io/advisories/CVE-2023-34021.md)
  `CVE-2023-34021` · CVE record: Andy Moyle Church Admin · CVSS 7.1 High · Not analysed yet · Published 23 Jun 2023 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=andy-moyle-church-admin>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/andy-moyle-church-admin/>. Everything for agents: <https://agentprime.io/llms.txt>.