ThreatPress

WordPress Vulnerabilities Database

Back

WordPress Church Admin plugin <=0.564 - Unauthenticated Directory Traversal vulnerability

Product
Church Admin
Description
Unauthenticated Directory Traversal vulnerability found in WordPress Church Admin plugin (versions <=0.564).
Solution
Update the WordPress Church Admin plugin to the latest available version (at least 0.565).
Classification
Type Directory Traversal
OWASP Top 10 A4: Insecure Direct Object References
References
Plugin changelog
CVE
Name CVE-N/A
Versions
Affected In <=0.564
Fixed In 0.565
Disclosure date
2018-01-10
Submitter
ThreatPress