https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:23:05 +0000 https://cve.radiocsirt.org/vuln/cve-2026-0682 <p><strong>Affected:</strong> andy_moyle Church Admin</p> <p>The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.28 due to insufficient validation of user-supplied URLs in the &#39;audio_url&#39; parameter. This makes it possible for authenticated attackers, with Administrator-level access, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> <p><strong>Affected:</strong> andy_moyle Church Admin</p> <p>The Church Admin plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.28 due to insufficient validation of user-supplied URLs in the &#39;audio_url&#39; parameter. This makes it possible for authenticated attackers, with Administrator-level access, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.</p> https://cve.radiocsirt.org/vuln/cve-2026-0682