CVE · Medium

CVE-2026-125792 — Missing Authorization

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-125792 Missing Authorization Missing Authorization Medium 5.3 < 5.1.9 5.1.9 2026-11-13 —

CVE-2026-125792 is a Missing Authorization vulnerability in the WordPress plugin church-admin (church-admin). Versions before 5.1.9 are affected. Fixed in 5.1.9. CVSS score: 5.3 (Medium). Published 2026-11-13.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.