WordPress plugin
Sermon Browser security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical1
- High1
- Medium2
- Low0
All Sermon Browser vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Cross-Site Request Forgery ≤0.45.22No patch available | CVE-2022-0499 | |
| Medium6.1 | Multiple Cross-Site Scripting ≤0.45.15Update to 0.45.16 | CVE-2016-10897 | |
| Medium6.1 | Cross-Site Scripting <0.43.6Update to 0.43.6 | — | |
| Critical9.8 | SQL Injection <0.43.6Update to 0.43.6 | — |
- High8.8Cross-Site Request Forgery
≤0.45.22No patch available
- Medium6.1Multiple Cross-Site Scripting
≤0.45.15Update to 0.45.16
- Medium6.1Cross-Site Scripting
<0.43.6Update to 0.43.6
- Critical9.8SQL Injection
<0.43.6Update to 0.43.6
Sermon Browser: common questions
Does Sermon Browser have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Sermon Browser: 1 critical, 1 high, 2 medium. At least one is not fixed in the latest version.
How do I check which version of Sermon Browser I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Sermon Browser vulnerability?
CVE-2022-0499, published Mar 1, 2022: Sermon Browser <= 0.45.22 - Cross-Site Request Forgery. Severity: High (CVSS 8.8).
Is any Sermon Browser vulnerability listed in CISA KEV?
No. None of the known Sermon Browser vulnerabilities is currently listed in the CISA KEV catalog.