Sermon Browser vulnerabilities
We track 1 vulnerability in Sermon Browser products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 28, 2022.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Sermon Browser vulnerabilities
- 8.8 High severity
Sermon Browser: Cross-Site Request Forgery
The Sermon Browser WordPress plugin through 0.45.22 does not have CSRF checks in place when uploading Sermon files, and does not validate them in any way, allowing attackers to make a logged in admin upload arbitrary files such as PHP ones.