# cve.now: Andy_moyle

The newest entries naming Andy_moyle as an affected vendor (up to 200), of 29 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-123418](https://cve.now/CVE-2026-123418.md): Church Admin \<= 5.1.7 - Unauthenticated Stored Cross-Site Scripting via 'lat' Parameter (CVSS 7.2)
- [CVE-2026-94421](https://cve.now/CVE-2026-94421.md): Church Admin \<= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter (CVSS 6.4)
- [CVE-2026-66478](https://cve.now/CVE-2026-66478.md): WordPress Church Admin plugin \<= 5.1.1 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-61983](https://cve.now/CVE-2026-61983.md): WordPress Church Admin plugin \<= 5.0.30 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-35648](https://cve.now/CVE-2024-35648.md): WordPress Emergency Password Reset plugin \<= 8.0 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2026-0682](https://cve.now/CVE-2026-0682.md): Church Admin \<= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio\_url' Parameter (CVSS 2.2)
- [CVE-2025-57942](https://cve.now/CVE-2025-57942.md): WordPress Emergency Password Reset plugin \<= 9.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2025-39553](https://cve.now/CVE-2025-39553.md): WordPress Church Admin plugin \<= 5.0.9 - Sensitive Data Exposure vulnerability (CVSS 4.3)
- [CVE-2025-57896](https://cve.now/CVE-2025-57896.md): WordPress Church Admin Plugin \<= 5.0.26 - Broken Access Control Vulnerability (CVSS 5.3)
- [CVE-2025-39555](https://cve.now/CVE-2025-39555.md): WordPress Church Admin plugin \<= 5.0.23 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2025-26941](https://cve.now/CVE-2025-26941.md): WordPress Church Admin plugin \<= 5.0.18 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2024-53795](https://cve.now/CVE-2024-53795.md): WordPress Church Admin plugin \<= 5.0.8 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-37440](https://cve.now/CVE-2024-37440.md): WordPress Church Admin plugin \<= 4.4.4 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2024-50438](https://cve.now/CVE-2024-50438.md): WordPress Church Admin plugin \< 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2024-37418](https://cve.now/CVE-2024-37418.md): WordPress Church Admin plugin \<= 4.4.6 - Arbitrary File Upload vulnerability (CVSS 9.9)
- [CVE-2024-35764](https://cve.now/CVE-2024-35764.md): WordPress Church Admin plugin \<= 4.4.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-35637](https://cve.now/CVE-2024-35637.md): WordPress Church Admin plugin \<= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability (CVSS 4.4)
- [CVE-2024-31281](https://cve.now/CVE-2024-31281.md): WordPress Church Admin plugin \<= 4.1.6 - Broken Access Control vulnerability (CVSS 6.3)
- [CVE-2024-34828](https://cve.now/CVE-2024-34828.md): WordPress Church Admin plugin \<= 4.1.32 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-32090](https://cve.now/CVE-2024-32090.md): WordPress Church Admin plugin \<= 4.0.27 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-31280](https://cve.now/CVE-2024-31280.md): WordPress Church Admin plugin \<= 4.1.5 - Arbitrary File Upload vulnerability (CVSS 9.9)
- [CVE-2024-30505](https://cve.now/CVE-2024-30505.md): WordPress Church Admin plugin \<= 4.1.18 - Broken Access Control vulnerability (CVSS 5.4)
- [CVE-2024-30493](https://cve.now/CVE-2024-30493.md): WordPress Church Admin plugin \<= 4.1.7 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2024-30244](https://cve.now/CVE-2024-30244.md): WordPress Church Admin plugin \<= 4.0.27 - SQL Injection via shortcode vulnerability (CVSS 8.5)
- [CVE-2024-30193](https://cve.now/CVE-2024-30193.md): WordPress Church Admin plugin \<= 4.1.17 - Stored Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-30197](https://cve.now/CVE-2024-30197.md): WordPress Church Admin plugin \<= 4.0.26 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2023-38515](https://cve.now/CVE-2023-38515.md): WordPress Church Admin Plugin \<= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF) (CVSS 5.5)
- [CVE-2023-30782](https://cve.now/CVE-2023-30782.md): WordPress Church Admin Plugin \<= 3.7.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)
- [CVE-2023-34021](https://cve.now/CVE-2023-34021.md): WordPress Church Admin Plugin \<= 3.7.29 is vulnerable to Cross Site Scripting (XSS) (CVSS 7.1)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/andy-moyle
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.