Vulnerabilities and security researches foradvanced-sermons advanced-sermons

Jun 15, 2025

CVE, Research URL: CVE-2025-49863
Home page URL: Security reports for Advanced Sermons
Application: Advanced Sermons
Date: -
Research Description: Advanced Sermons [advanced-sermons] < 3.7 CVE-2025-49863
Affected versions: Min -, max -.
Status: vulnerable

Oct 28, 2024

CVE, Research URL: CVE-2024-50458
Home page URL: Security reports for Advanced Sermons
Application: Advanced Sermons
Date: Oct 28, 2024
Research Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Codeus Advanced Sermons allows Stored XSS.This issue affects Advanced Sermons: from n/a through 3.4.
Affected versions: Min -, max -.
Status: vulnerable

Sep 07, 2024

CVE, Research URL: CVE-2024-7599
Home page URL: Security reports for Advanced Sermons
Application: Advanced Sermons
Date: Sep 06, 2024
Research Description: The Advanced Sermons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sermon_video_embed’ parameter in all versions up to, and including, 3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: Min -, max -.
Status: vulnerable

Jun 07, 2024

CVE, Research URL: CVE-2024-27952
Home page URL: Security reports for Advanced Sermons
Application: Advanced Sermons
Date: Mar 13, 2024
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Codeus Advanced Sermons allows Reflected XSS.This issue affects Advanced Sermons: from n/a through 3.2.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2024-29928
Home page URL: Security reports for Advanced Sermons
Application: Advanced Sermons
Date: Mar 27, 2024
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Codeus Advanced Sermons allows Reflected XSS.This issue affects Advanced Sermons: from n/a through 3.1.
Affected versions: Min -, max -.
Status: vulnerable