https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:08:12.693489+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-285386 EUVD-2026-285386 2026-10-05T01:08:12.799426+00:00 EUVD-2026-285386 https://cve.radiocsirt.org/vuln/fkie_cve-2026-0682 fkie_cve-2026-0682 2026-10-05T01:08:12.799504+00:00

The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.28 due to insufficient validation of user-supplied URLs in the 'audio_url' parameter. This makes it possible for authenticated attackers, with Administrator-level access, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

 https://cve.radiocsirt.org/vuln/ghsa-5c7c-gqqx-2g9q GHSA-5c7c-gqqx-2g9q 2026-10-05T01:08:12.799579+00:00

The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.28 due to insufficient validation of user-supplied URLs in the 'audio_url' parameter. This makes it possible for authenticated attackers, with Administrator-level access, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.