Tra cứu CVE

Mọi CVE đã công bố cùng các advisory mã nguồn mở (NVD, OSV, GitHub), kèm CVSS, EPSS và cho biết lỗ hổng có đang bị khai thác thực tế hay không (CISA KEV). Cập nhật mỗi vài giờ. Các bài quét đối chiếu dữ liệu này với công nghệ phát hiện được trên site.

402.878 lỗ hổng · 1.766 đang bị khai thác (CISA KEV)

church admin project ✕Xoá bộ lọc

17 kết quả

Mã	Mức độ	Mô tả	Công bố
CVE-2024-37440	TRUNG BÌNH4.3	Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.	01/11/2024
CVE-2024-37418	NGHIÊM TRỌNG9.9	Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6.	09/07/2024
CVE-2024-35764	TRUNG BÌNH5.4	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.	21/06/2024
CVE-2024-35637	TRUNG BÌNH4.4	Server-Side Request Forgery (SSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.3.6.	03/06/2024
CVE-2024-31281	TRUNG BÌNH6.3	Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6.	17/05/2024
CVE-2024-34828	TRUNG BÌNH4.3	Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.32.	14/05/2024
CVE-2024-32090	TRUNG BÌNH4.3	Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.	15/04/2024
CVE-2024-31280	CAO8.8	Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5.	07/04/2024
CVE-2024-30505	TRUNG BÌNH6.5	Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18.	29/03/2024
CVE-2024-30493	TRUNG BÌNH4.3	Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.7.	29/03/2024
CVE-2024-30244	CAO8.8	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.	28/03/2024
CVE-2024-30197	TRUNG BÌNH5.4	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.26.	27/03/2024
CVE-2024-30193	TRUNG BÌNH5.4	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.17.	27/03/2024
CVE-2023-38515	TRUNG BÌNH4.9	Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56.	13/11/2023
CVE-2023-34021	TRUNG BÌNH6.1	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.29 versions.	23/06/2023
CVE-2022-0833	TRUNG BÌNH4.3	The Church Admin WordPress plugin before 3.4.135 does not have authorisation and CSRF in some of its action as well as requested files, allowing unauthenticated attackers to repeatedly request the "refresh-backup" action, and simultaneously keep requesting a publicly accessible temporary file generated by the plugin in	28/03/2022
CVE-2015-4127	TRUNG BÌNH4.3	Cross-site scripting (XSS) vulnerability in the church_admin plugin before 0.810 for WordPress allows remote attackers to inject arbitrary web script or HTML via the address parameter, as demonstrated by a request to index.php/2015/05/21/church_admin-registration-form/.	28/05/2015