Andy-moyle
5 CVEs tracked since 2024. Since Mar 2024, none of them reached CISA KEV.
Andy-moyle CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2024-03 | 5 | 0 |
| 2024-04 | 4 or fewer | |
| 2024-05 | 5 or fewer | |
| 2024-06 | 4 or fewer | |
| 2024-07 | 4 or fewer | |
| 2024-08 | 4 or fewer | |
| 2024-09 | 3 or fewer | |
| 2024-10 | 4 or fewer | |
| 2024-11 | 4 or fewer | |
| 2024-12 | 3 or fewer | |
| 2025-01 | 4 or fewer | |
| 2025-02 | 3 or fewer | |
| 2025-03 | 5 or fewer | |
| 2025-04 | 4 or fewer | |
| 2025-05 | 4 or fewer | |
| 2025-06 | 4 or fewer | |
| 2025-07 | 5 or fewer | |
| 2025-08 | 4 or fewer | |
| 2025-09 | 4 or fewer | |
| 2025-10 | 4 or fewer | |
| 2025-11 | 4 or fewer | |
| 2025-12 | 5 or fewer | |
| 2026-01 | 5 or fewer | |
| 2026-02 | 5 or fewer | |
| 2026-03 | 7 or fewer | |
| 2026-04 | 6 or fewer | |
| 2026-05 | 7 or fewer | |
| 2026-06 | 7 or fewer | |
| 2026-07 | 7 or fewer | |
| 2026-08 | 8 or fewer | |
| 2026-09 | 9 or fewer | |
| 2026-10 | 6 or fewer |
Products
The products that kept showing up in Andy-moyle's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Andy-moyle.
- CVE-2026-94421Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter6.4
- CVE-2026-66478WordPress Church Admin plugin <= 5.1.1 - SQL Injection vulnerability9.3
- CVE-2026-61983WordPress Church Admin plugin <= 5.0.30 - Broken Access Control vulnerability5.3
- CVE-2026-0682Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter2.2
- CVE-2025-57942WordPress Emergency Password Reset plugin <= 9.3 - Cross Site Request Forgery (CSRF) vulnerability4.3
- CVE-2025-39553WordPress Church Admin plugin <= 5.0.9 - Sensitive Data Exposure vulnerability4.3
- CVE-2025-57896WordPress Church Admin Plugin <= 5.0.26 - Broken Access Control Vulnerability5.3
- CVE-2025-39555WordPress Church Admin plugin <= 5.0.23 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2025-26941WordPress Church Admin plugin <= 5.0.18 - SQL Injection vulnerability9.3
- CVE-2024-53795WordPress Church Admin plugin <= 5.0.8 - Broken Access Control vulnerability5.3
- CVE-2024-37440WordPress Church Admin plugin <= 4.4.4 - Broken Access Control vulnerability4.3
- CVE-2024-50438WordPress Church Admin plugin < 5.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1
- CVE-2024-37418WordPress Church Admin plugin <= 4.4.6 - Arbitrary File Upload vulnerability9.9
- CVE-2024-35764WordPress Church Admin plugin <= 4.4.4 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2024-35637WordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerability4.4
The record
- Peak rank
- #145 in Mar 2024
- Busiest month shown
- Mar 2024, 5 CVEs
- Months with a KEV entry
- 0 since Mar 2024
- Monthly snapshots
- 1 since 2024