Known Vulnerabilities for Church Admin by Church Admin Project
Listed below are 10 of the newest known vulnerabilities associated with "Church Admin" by "Church Admin Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-42289 json | ChurchCRM is an open-source church management system. Prior to 7.3.2, UserEditor.php processes user account creation and perm... | Not Provided | 2026-05-12 | 2026-05-14 |
| CVE-2026-39340 json | ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in PropertyTypeEdi... | Not Provided | 2026-04-07 | 2026-04-08 |
| CVE-2026-39336 json | ChurchCRM is an open-source church management system. Prior to 7.1.0, a stored cross-site scripting issue affects the Directo... | Not Provided | 2026-04-07 | 2026-04-07 |
| CVE-2026-39335 json | ChurchCRM is an open-source church management system. Prior to 7.1.1, there is Stored XSS in group remove control and family ... | Not Provided | 2026-04-07 | 2026-04-08 |
| CVE-2026-35575 json | ChurchCRM is an open-source church management system. Prior to 6.5.3, a Stored Cross-Site Scripting (Stored XSS) vulnerabilit... | Not Provided | 2026-04-07 | 2026-04-07 |
| CVE-2025-57896 json | Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Exploiting Incorrectly Configured Access C... | Not Provided | 2025-08-22 | 2026-04-23 |
| CVE-2025-39555 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin... | Not Provided | 2025-04-16 | 2026-04-23 |
| CVE-2025-39553 json | Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through... | Not Provided | 2025-09-09 | 2026-04-23 |
| CVE-2025-26941 json | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin... | Not Provided | 2025-03-26 | 2026-04-23 |
| CVE-2024-53795 json | Missing Authorization vulnerability in andy_moyle Church Admin church-admin allows Accessing Functionality Not Properly Const... | Not Provided | 2024-12-06 | 2026-04-23 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Church Admin Project | Church Admin | 2.3100 | |||
| Application | Church Admin Project | Church Admin | 2.3000 | |||
| Application | Church Admin Project | Church Admin | 2.2900 | |||
| Application | Church Admin Project | Church Admin | 2.2870 | |||
| Application | Church Admin Project | Church Admin | 2.2860 | |||
| Application | Church Admin Project | Church Admin | 2.2850 | |||
| Application | Church Admin Project | Church Admin | 2.2840 | |||
| Application | Church Admin Project | Church Admin | 2.2830 | |||
| Application | Church Admin Project | Church Admin | 2.2820 | |||
| Application | Church Admin Project | Church Admin | 2.2810 | |||
| Application | Church Admin Project | Church Admin | 2.2800 | |||
| Application | Church Admin Project | Church Admin | 2.2780 | |||
| Application | Church Admin Project | Church Admin | 2.2770 | |||
| Application | Church Admin Project | Church Admin | 2.2760 | |||
| Application | Church Admin Project | Church Admin | 2.2740 | |||
| Application | Church Admin Project | Church Admin | 2.2730 | |||
| Application | Church Admin Project | Church Admin | 2.2720 | |||
| Application | Church Admin Project | Church Admin | 2.2710 | |||
| Application | Church Admin Project | Church Admin | 2.2700 | |||
| Application | Church Admin Project | Church Admin | 2.2690 |