Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2865▼ 160 respecto a la semana anterior

Críticas / altas1384▲ 52 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)266▼ 260 respecto a la semana anterior

28 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2026-66478	Aplazada	Crítica (9.3)	0.40%	—	Church Admin^AI	13/8/2026	14/8/2026	Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.
CVE-2026-61983	Aplazada	Media (5.3)	0.29%	—	Andy Moyle Church Admin^AI	13/7/2026	13/7/2026	Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.30.
CVE-2026-0682	Aplazada	Baja (2.2)	0.28%	—	Church Admin^AI	17/1/2026	17/6/2026	The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.28 due to insufficient validation of user-supplied URLs in the 'audio_url' parameter. This makes it possible for authenticated attackers, with Administrator-level access, to make web requests to…
CVE-2025-39553	Aplazada	Media (4.3)	0.26%	—	Andy Moyle Church Admin^AI	9/9/2025	17/6/2026	Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 5.0.9.
CVE-2025-57896	Aplazada	Media (5.3)	0.22%	—	Andy Moyle Church Admin^AI	22/8/2025	17/6/2026	Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Church Admin: from n/a through <= 5.0.26.
CVE-2025-39555	Aplazada	Media (6.5)	0.35%	—	Andy Moyle Church Admin^AI	16/4/2025	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin allows Stored XSS.This issue affects Church Admin: from n/a through <= 5.0.23.
CVE-2025-26941	Aplazada	Crítica (9.3)	0.61%	—	Andy Moyle Church-admin^AI	26/3/2025	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin allows SQL Injection.This issue affects Church Admin: from n/a through <= 5.0.18.
CVE-2024-53795	Aplazada	Media (5.3)	0.55%	—	Andy Moyle Church Admin^AI	6/12/2024	17/6/2026	Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Church Admin: from n/a through <= 5.0.8.
CVE-2024-37440	Modificada	Media (4.3)	0.34%	—	Church Admin Project Church Admin	1/11/2024	17/6/2026	Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.
CVE-2024-50438	Modificada	Media (6.1)	0.31%	—	Themoyles Church Admin	28/10/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin allows Reflected XSS.This issue affects Church Admin: from n/a through < 5.0.0.
CVE-2024-37418	Modificada	Crítica (9.9)	0.54%	—	Church Admin Project Church Admin	9/7/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6.
CVE-2024-35764	Modificada	Media (5.4)	0.32%	—	Church Admin Project Church Admin	21/6/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.
CVE-2024-35637	Modificada	Media (4.4)	0.24%	—	Church Admin Project Church Admin	3/6/2024	17/6/2026	Server-Side Request Forgery (SSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.3.6.
CVE-2024-31281	Modificada	Media (6.3)	0.34%	—	Church Admin Project Church Admin	17/5/2024	17/6/2026	Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6.
CVE-2024-34828	Modificada	Media (4.3)	0.25%	—	Church Admin Project Church Admin	14/5/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.32.
CVE-2024-32090	Modificada	Media (4.3)	0.21%	—	Church Admin Project Church Admin	15/4/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.
CVE-2024-31280	Modificada	Alta (8.8)	0.63%	—	Church Admin Project Church Admin	7/4/2024	17/6/2026	Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5.
CVE-2024-30505	Modificada	Media (6.5)	0.47%	—	Church Admin Project Church Admin	29/3/2024	17/6/2026	Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18.
CVE-2024-30493	Modificada	Media (4.3)	0.21%	—	Church Admin Project Church Admin	29/3/2024	17/6/2026	Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.7.
CVE-2024-30244	Modificada	Alta (8.8)	0.66%	—	Church Admin Project Church Admin	28/3/2024	17/6/2026	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.
CVE-2024-30197	Modificada	Media (5.4)	0.32%	—	Church Admin Project Church Admin	27/3/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.26.
CVE-2024-30193	Modificada	Media (5.4)	0.32%	—	Church Admin Project Church Admin	27/3/2024	17/6/2026	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.17.
CVE-2023-38515	Modificada	Media (4.9)	0.51%	—	Church Admin Project Church Admin	13/11/2023	17/6/2026	Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56.
CVE-2023-30782	Modificada	Media (6.1)	0.38%	—	Churchadminplugin Church Admin	16/8/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.5 versions.
CVE-2023-34021	Modificada	Media (6.1)	0.38%	—	Church Admin Project Church Admin	23/6/2023	17/6/2026	Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Andy Moyle Church Admin plugin <= 3.7.29 versions.