CVE-2026-66478

An unauthenticated SQL injection vulnerability exists in Church Admin versions up to 5.1.1, allowing attackers to manipulate database queries and potentially gain unauthorized access to sensitive data. This critical flaw, with a CVSS score of 9.3, poses a significant risk to any organization using affected versions, particularly those managing sensitive information. Organizations utilizing Church Admin should prioritize immediate patching or mitigation efforts to safeguard their data integrity.