wpforchurch

Products

ProductCVEsExploitedLatest
Sermon Manager3–Dec 31, 2025

Exploited and recent CVEs

  • CVE-2025-63000 Medium 6.5 WordPress Sermon Manager plugin <= 2.30.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63002 Medium 5.3 WordPress Sermon Manager plugin <= 2.30.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-12368 Medium 6.4 Sermon Manager <= 2.30.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%