WordPress Church Admin Plugin Missing Authorization Vulnerability Allowing Sensitive Data Exposure

A missing authorization vulnerability has been identified in the WordPress Church Admin plugin, affecting versions through 5.0.9. This vulnerability allows unauthorized users to access sensitive information that is typically restricted, potentially leading to the exploitation of other weaknesses within the system.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data, which could be used to exploit additional vulnerabilities within the application or system.

Remediation

Users of the WordPress Church Admin plugin should update to version 5.0.10 or later to address this vulnerability. Patchstack users can enable auto-update for vulnerable plugins.