CVE-2024-31280

ALTO 8.8CVE-2024-31280 · Published 07/04/2024 · updated 17/06/2026

En resumen

CVE-2024-31280 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a church admin (church admin project).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.63%, mayor que el 50.0% de las vulnerabilidades.
Solución: actualizar a 4.1.6 o posterior.

Package	Affected versions	Patched versions
church admin church_admin_project	`< 4.1.6`	`4.1.6`

Description

Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5.

References

patchstack.com/database/Wordpress/Plugin/church-admin/vulnerability/wordpress-church-admin-plugin-4-1-5-arbitrary-file-upload-vulnerability
patchstack.com/database/vulnerability/church-admin/wordpress-church-admin-plugin-4-1-5-arbitrary-file-upload-vulnerability · Patch

Más vulnerabilidades de church admin

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

church admin

church_admin_project

< 4.1.6

4.1.6

Más vulnerabilidades de church admin

Ver todo →