PatchTheCVE: church adminhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-37440: Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: fhttps://patchthecve.com/cve/CVE-2024-37440.htmlhttps://patchthecve.com/cve/CVE-2024-37440.htmlWed, 17 Jun 2026 07:38:22 +0000MEDIUM 4.3: Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.CVE-2024-50438: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyhttps://patchthecve.com/cve/CVE-2024-50438.htmlhttps://patchthecve.com/cve/CVE-2024-50438.htmlWed, 17 Jun 2026 08:04:28 +0000HIGH 7.1: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin allows Reflected XSS.This issue affects Church Admin: from n/a through < 5.0.0.CVE-2024-37418: Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This isshttps://patchthecve.com/cve/CVE-2024-37418.htmlhttps://patchthecve.com/cve/CVE-2024-37418.htmlWed, 17 Jun 2026 07:38:20 +0000CRITICAL 9.9: Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.6.CVE-2024-35764: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyhttps://patchthecve.com/cve/CVE-2024-35764.htmlhttps://patchthecve.com/cve/CVE-2024-35764.htmlWed, 17 Jun 2026 07:35:20 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.4.4.CVE-2024-35637: Server-Side Request Forgery (SSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Chhttps://patchthecve.com/cve/CVE-2024-35637.htmlhttps://patchthecve.com/cve/CVE-2024-35637.htmlWed, 17 Jun 2026 07:35:06 +0000MEDIUM 4.4: Server-Side Request Forgery (SSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.3.6.CVE-2024-31281: Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: fhttps://patchthecve.com/cve/CVE-2024-31281.htmlhttps://patchthecve.com/cve/CVE-2024-31281.htmlWed, 17 Jun 2026 07:28:07 +0000MEDIUM 6.3: Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.6.CVE-2024-34828: Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Chuhttps://patchthecve.com/cve/CVE-2024-34828.htmlhttps://patchthecve.com/cve/CVE-2024-34828.htmlWed, 17 Jun 2026 07:34:08 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.32.CVE-2024-32090: Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Chuhttps://patchthecve.com/cve/CVE-2024-32090.htmlhttps://patchthecve.com/cve/CVE-2024-32090.htmlWed, 17 Jun 2026 07:29:14 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.CVE-2024-31280: Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This isshttps://patchthecve.com/cve/CVE-2024-31280.htmlhttps://patchthecve.com/cve/CVE-2024-31280.htmlWed, 17 Jun 2026 07:28:06 +0000CRITICAL 9.9: Unrestricted Upload of File with Dangerous Type vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.5.CVE-2024-30505: Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: fhttps://patchthecve.com/cve/CVE-2024-30505.htmlhttps://patchthecve.com/cve/CVE-2024-30505.htmlWed, 17 Jun 2026 07:27:05 +0000MEDIUM 6.5: Missing Authorization vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.18.CVE-2024-30493: Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Chuhttps://patchthecve.com/cve/CVE-2024-30493.htmlhttps://patchthecve.com/cve/CVE-2024-30493.htmlWed, 17 Jun 2026 07:27:04 +0000MEDIUM 4.3: Cross-Site Request Forgery (CSRF) vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.7.CVE-2024-30244: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyhttps://patchthecve.com/cve/CVE-2024-30244.htmlhttps://patchthecve.com/cve/CVE-2024-30244.htmlWed, 17 Jun 2026 07:26:35 +0000HIGH 8.5: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.27.CVE-2024-30197: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyhttps://patchthecve.com/cve/CVE-2024-30197.htmlhttps://patchthecve.com/cve/CVE-2024-30197.htmlWed, 17 Jun 2026 07:26:28 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.0.26.CVE-2024-30193: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyhttps://patchthecve.com/cve/CVE-2024-30193.htmlhttps://patchthecve.com/cve/CVE-2024-30193.htmlWed, 17 Jun 2026 07:26:27 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in andy_moyle Church Admin church-admin.This issue affects Church Admin: from n/a through <= 4.1.17.