Cybersecurity > ChurchCRM

Tracking since May 19, 2026 · Latest signal Apr 18, 2026 · 21 matched data points

Overall sentiment

Positive 0% (0)Negative 95% (20)Neutral 5% (1)

Daily sentiment

Claims (3)

Claims contributing to this aggregate. Confirmed negative claims count as negative impact; confirmed positive claims count as positive impact.

ChurchCRM versions prior to 7.2.0 have multiple security vulnerabilities that could allow unauthorized access and data exposure.

Parent: CybersecurityEntity: ChurchCRMImpact: negativeDate: Apr 18, 2026Target: ChurchCRM's security practices7 matched entries7 confirmed0 disputed0 neutral0 unclear

ChurchCRM versions prior to 7.2.0 improperly handle user input, leading to potential cross-site scripting (XSS) and data exposure.

Parent: CybersecurityEntity: ChurchCRMSub-entity: User input handlingImpact: negativeDate: Apr 18, 2026Target: Security of user input handling in ChurchCRM7 matched entries6 confirmed0 disputed1 neutral0 unclear

The API endpoints in ChurchCRM versions prior to 7.2.0 are vulnerable to authentication bypass and information leakage.

Parent: CybersecurityEntity: ChurchCRMSub-entity: API endpointsImpact: negativeDate: Apr 18, 2026Target: Security of ChurchCRM API endpoints7 matched entries7 confirmed0 disputed0 neutral0 unclear