Church Content – Sermons, Events and More

Church Content – Sermons, Events and More has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Church Content – Sermons, Events and More has a vendor fix available, so running the current release closes it.

All of these findings were reported by Dhabaleshwar Das. Church Content – Sermons, Events and More is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Church Content – Sermons, Events and More vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2024-32094

Church Content – Sermons, Events and More <= 2.6 - Cross-Site Request Forgery to Notice Dismissal

Read the full analysis

Vulnerability Records

1 records
Church Content – Sermons, Events and More banner
Latestv2.7

Church Content – Sermons, Events and More

Steven Gliebe

Author

Steven Gliebe

4.9(49)
98/100
Last Updated
2026-05-23 (4mo ago)
Active Installs
4,000+
Downloads
163,746
Requires WP
3.6+
Requires PHP
7.4+
Tested up to
WP 7.0.4
Created
2013-09-19 (13y ago)

The Church Content WordPress plugin provides an interface for managing sermons, events, people and locations. Please be aware that a compatible theme is required for presenting content from these church-centric post types in a tightly-integrated manner. Who this is for This plugin is intended for a very specific audience. If you are not one of the following then this plugin will not be useful to you. Users of official themes from ChurchThemes.com Users of third-party themes made specifically for this plugin Theme developers improving data portability for church sites What it does It provides post types, taxonomies and fields for sermons, events, people and locations to be shown by a compatible church WordPress theme. Experienced WordPress developers agree that functionality like this does not belong in themes since themes are intended only for controlling the appearance of a WordPress site. Content that users might expect to take with them if they switch themes should “live” in a plugin in order to avoid theme lock-in. Similarly, our approach is not to present content using the plugin since themes offer more control for that purpose. This is why a compatible theme is required. See the Plugin Details on ChurchThemes.com for a tour of features. Read the User Guide for instructions. Compatible Themes A compatible theme is required for presenting sermons, events, etc. added with the plugin. Official themes provided by ChurchThemes.com Third-party themes at churchthemes.com/third-party-themes Church Content Pro Church Content Pro is an add-on that provides additional features. Sermon Podcasting (iTunes, Google Play, etc.) Recurring Events (e.g. “every Monday and Thursday”) Event Date Exclusions (holidays, weather closings, etc.) Enhanced SEO (schema.org Structure Data using JSON-LD) Location Memory (autofill and select previous event locations) Wording Settings (e.g. rename “Sermons” to “Messages”) Agency Mode (simplify license management for clients) Developers Please see the Developer Guide on ChurchThemes.com for notes on developing themes that use this plugin. A couple benefits are that you will save time and be helping to accomplish better data portability among church websites powered by WordPress. You can follow development on GitHub. Translations Several translations are available, including English, Spanish, German, French, Portuguese, Swedish, Dutch, Norwegian, Serbian and Slovak. See the Translations section in the plugin’s user guide for a more complete list. Also see translate.wordpress.org. Follow us Visit ChurchThemes.com for compatible themes, add-ons and help We’re on Twitter, Facebook and have a Newsletter Lead developer: stevengliebe.com Note: This plugin was previously named “Church Theme Content”.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C