wpforchurch
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Sermon Manager | 3 | – | Dec 31, 2025 |
Exploited and recent CVEs
- CVE-2025-63000 WordPress Sermon Manager plugin <= 2.30.0 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-63002 WordPress Sermon Manager plugin <= 2.30.0 - Broken Access Control vulnerability 0.2%
- CVE-2025-12368 Sermon Manager <= 2.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%