Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 29
Reset filtersChurch Admin <= 5.1.1 - Unauthenticated SQL Injection
Church Admin <= 5.0.30 - Missing Authorization
Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter
Church Admin <= 5.0.26 - Missing Authorization
Church Admin <= 5.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 5.0.9 - Unauthenticated Information Disclosure
Church Admin <= 5.0.18 - Unauthenticated SQL Injection
Church Admin <= 5.0.8 - Missing Authorization
Church Admin < 5.0.0 - Reflected Cross-Site Scripting
Church Admin <= 4.4.6 - Authenticated (Subscriber+) Arbitrary File Upload
Church Admin <= 4.4.4 - Missing Authorization
Church Admin <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Church Admin <= 4.3.6 - Authenticated (Admin+) Server-Side Request Forgery
Church Admin <= 4.1.32 - Cross-Site Request Forgery
Church Admin <= 4.0.27 - Cross-Site Request Forgery
Church Admin <= 4.1.5 - Authenticated (Subscriber+) Arbitrary File Upload
Church Admin <= 4.1.6 - Missing Authorization
Church Admin <= 4.1.18 - Missing Authorization
Church Admin <= 4.1.7 - Cross-Site Request Forgery
Church Admin <= 4.0.27 - Authenticated (Contributor+) SQL Injection
Church Admin <= 4.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Church Admin <= 4.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via meta-text
Church Admin <= 3.7.56 - Server-Side Request Forgery via church_admin_import_csv
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.