Skip to content
PluginCanary

Church Admin

by andy_moyle · 900+ active installs · Checked 3 Nov 2026
Healthy

Healthy: released 4 days ago, tested with WordPress 7.1, no open vulnerabilities.

86/ 100 Canary Score

Based on 3 of 5 areas

Sub-scores for Church Admin
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is Church Admin still maintained?
Yes. Last release 31 Oct 2026, 119 releases in the last 24 months. 31 Oct 2026 · wordpress.org
Who owns Church Admin, and has it changed hands?
No change recorded. Main committer andy_moyle since Jan 2011. 3 Nov 2026 · SVN log
Was Church Admin removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Church Admin safe?
29 known vulnerabilities, all fixed (latest in 5.1.3). Not on the exploited list. 9 Oct 2026 · Wordfence Intelligence
Is the latest Church Admin update safe to install?
No ownership change before 5.1.7. No one-star spike after it. 31 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • InfoSEC-39 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence

History: 29 past vulnerabilities, all patched.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
andy_moyle31 Jan 2011 to 31 Oct 2026, 1740 commits

1 committer recorded. No ownership changes recorded since 2011.

Maintenance

Last release
4 days ago
Releases, 24 months
119
Tested up to
7.1 current
Requires PHP
7.0 supported 8.2+
Releases per quarter
Releases per quarter for Church Admin
Q1 20240
Q2 20240
Q3 20240
Q4 20247
Q1 20259
Q2 202589
Q3 20255
Q4 20251
Q1 20263
Q2 20260
Q3 20265
Q4 20264

Last release 31 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.7.

Last 90 days vs lifetime average rating for Church Admin
Last 90 daysNo reviews
Lifetime4.7
Rating distribution
5 star15
4 star1
3 star0
2 star0
1 star1

Security record

9 vulnerabilities in 24 months (29 on record), all patched (latest fixed in 5.1.3).

Show 29 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
9 Oct 2026Church Admin <= 5.1.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'email' Parameter6.4<= 5.1.25.1.3n/a
10 Aug 2026Church Admin <= 5.1.1 - Unauthenticated SQL Injection7.5<= 5.1.15.1.2n/a
3 Aug 2026Church Admin <= 5.0.30 - Missing Authorization4.3<= 5.0.305.1.0n/a
16 Jan 2026Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter2.2<= 5.0.285.0.29n/a
22 Aug 2025Church Admin <= 5.0.26 - Missing Authorization5.3<= 5.0.265.0.27n/a
16 Apr 2025Church Admin <= 5.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 5.0.235.0.24n/a
16 Apr 2025Church Admin <= 5.0.9 - Unauthenticated Information Disclosure5.3<= 5.0.95.0.10n/a
13 Mar 2025Church Admin <= 5.0.18 - Unauthenticated SQL Injection7.5<= 5.0.185.0.19n/a
2 Dec 2024Church Admin <= 5.0.8 - Missing Authorization5.3<= 5.0.85.0.9n/a
24 Oct 2024Church Admin < 5.0.0 - Reflected Cross-Site Scripting6.1< 5.0.05.0.0n/a
4 Jul 2024Church Admin <= 4.4.6 - Authenticated (Subscriber+) Arbitrary File Upload8.8<= 4.4.64.4.7n/a
28 Jun 2024Church Admin <= 4.4.4 - Missing Authorization5.3<= 4.4.44.4.5n/a
17 Jun 2024Church Admin <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 4.4.44.4.5n/a
30 May 2024Church Admin <= 4.3.6 - Authenticated (Admin+) Server-Side Request Forgery5.5<= 4.3.64.4.0n/a
9 May 2024Church Admin <= 4.1.32 - Cross-Site Request Forgery4.3<= 4.1.324.2.0n/a
11 Apr 2024Church Admin <= 4.0.27 - Cross-Site Request Forgery4.3<= 4.0.274.0.28n/a
5 Apr 2024Church Admin <= 4.1.5 - Authenticated (Subscriber+) Arbitrary File Upload8.8<= 4.1.54.1.6n/a
5 Apr 2024Church Admin <= 4.1.6 - Missing Authorization4.3<= 4.1.64.1.7n/a
28 Mar 2024Church Admin <= 4.1.7 - Cross-Site Request Forgery4.3<= 4.1.74.1.8n/a
28 Mar 2024Church Admin <= 4.1.18 - Missing Authorization4.3<= 4.1.184.1.19n/a
26 Mar 2024Church Admin <= 4.0.27 - Authenticated (Contributor+) SQL Injection8.8<= 4.0.274.0.28n/a
25 Mar 2024Church Admin <= 4.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode6.4<= 4.0.264.0.27n/a
25 Mar 2024Church Admin <= 4.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via meta-text6.4<= 4.1.174.1.18n/a
26 Jul 2023Church Admin <= 3.7.56 - Server-Side Request Forgery via church_admin_import_csv5.5<= 3.7.563.8.0n/a
13 Jun 2023Church Admin <= 3.7.29 - Reflected Cross-Site Scripting6.1<= 3.7.293.7.30n/a

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

900+ active installs. History builds with each weekly snapshot.

Momentum history builds with each snapshot.

Healthier alternatives

Same job, rated Healthy, higher Canary Score. Never sponsored.

Content ControlScore 95 · 40,000+

Facts

Version5.1.7
Authorandy_moyle
Added31 Jan 2011
Last updated31 Oct 2026
Active installs900+
Requires WordPress5.0
Tested up to7.1.4
Requires PHP7.0
CategoryCommunity & Social > Membership Sites & Subscriptions
Tagschurch, sermons, calendar, schedule, membership

Other plugins by this author: Emergency password reset, Never Loose Contact Form, Pray for the Nations, Text Summary, Filter for Amazon Associates links

Questions

Is Church Admin still maintained?

Yes. Last release 31 Oct 2026, 119 releases in the last 24 months.

Who owns Church Admin, and has it changed hands?

No change recorded. Main committer andy_moyle since Jan 2011.

Was Church Admin removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Church Admin safe?

29 known vulnerabilities, all fixed (latest in 5.1.3). Not on the exploited list.

Is the latest Church Admin update safe to install?

No ownership change before 5.1.7. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue