Church Admin

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 10% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from. A declining trend compresses what a buyer would pay.

1. ★★★★★ huppbrian

   3.6y ago

   I am just starting to tap this plugin’s capabilities for our church. The more I learn about it, the more impressed I become. It quickly became obvious that Andy isn’t just a software developer, but also someone who truly understands the needs of a church organization with regard to creating a web presence. But what impresses me most is Andy’s responsiveness in supporting his plugin users. For example last night before I went to bed, I sent an email to Andy noting a formatting issue with the member registration form, and by the time I got home from work this evening, Andy had put out a new update that resolves the problem. That’s only one of several issues he’s quickly helped me out with. Those other issues were my own user problems not issues with the plugin code. Andy and this plugin are responsive to the nth degree. Love it.

   Read on wp.org ↗
2. ★★★★★ Roy Verrips

   3.9y ago

   WP-Church Admin This is a great ministry providing tools to help administer small to medium size church at no cost (aside from a one-time fee if you would like to also include the Mobile App) The author continues to improve and enhance the features and functionality and is open to suggestions to improve it even further. I can’t recommend the plugin highly enough and am thankful to Our Lord for providing such a dedicated working in Andy Moyle (the author) for the blessing this is to the church.

   Read on wp.org ↗
3. ★★★★★ Arnold Goodway

   5.0y ago

   I am afraid I cannot see where all the good reviews are coming from. Simply activating this plugin reduces your page speed by at least 60%. The use of tables and frames makes styling difficult. This topic was modified 4 years, 11 months ago by Arnold Goodway.

   Read on wp.org ↗
4. ★★★★★ ceesbakker

   5.5y ago

   Andy, you did a real good Job with this plugin!

   Read on wp.org ↗
5. ★★★★★ nboot8

   6.1y ago

   This plugin is simply amazing and is constantly getting updates/improvements. Having tried pretty much every other option out there, I can tell you that the plugin has everything you might need – without the crazy prices or security concerns that seem to come with other developer offerings. Until I found “Church Admin”, the other plugins I tried either had some shady code embedded or they were unbelievably out of our price range. This one is highly customizable with fantastic development support. Sign up for the Andriod/IOS app to support the developer! You will not be disappointed. This topic was modified 5 years, 11 months ago by nboot8.

   Read on wp.org ↗
6. ★★★★★ perfumewagon

   7.2y ago

   We were looking for something more than just using a sermon browser plugin to post our latest talks at church. Andy Moyle has created a fantastic all in one product that serves the majority of backend church administration. From displaying your latest sermons to having a fully fledged member directory this is my favourite of all plugins I’ve ever used. Great support from Andy and regular updates.

   Read on wp.org ↗
7. ★★★★★ garrizano

   7.9y ago

   Es un excelente plugin, muy útil para las iglesias. Lo único es que me gustaría tener la traducción en español, pero es muy útil.

   Read on wp.org ↗
8. ★★★★★ mickwall

   7.9y ago

   I am currently developing a website for my church and went looking for a back office solution to help manage the administration. The Church Admin function is very flexible and helps manage the day to day tasks of running the church. The biggest advantage is to get all the details for everyone in one place, names, emails, number, addresses etc, for us it soon turned out we didn’t have this! The church admin plugin has a great import facility to help with this. The church admin plugin also has the ability to create custom fields, so if you need to store some particular piece of information you can create your own field to do so. The developer is extremely responsive to both questions on how to use the system and on feature requests. If you need an admin function for your church – for free – this is the one for you. The developer also has mobile apps for IOS and Android and charges on £7.50 a month for your whole church.

   Read on wp.org ↗

28 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.5 Church Admin <= 5.1.1 - Unauthenticated SQL Injection ↗
   2026-08-10 CVE-2026-66478 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 5.1.1 Patched in 5.1.2
2. Medium · 4.3 Church Admin <= 5.0.30 - Missing Authorization ↗
   2026-08-03 CVE-2026-61983 Missing Authorization Affects <= 5.0.30 Patched in 5.1.0
3. Low · 2.2 Church Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter ↗
   2026-01-16 CVE-2026-0682 Server-Side Request Forgery (SSRF) Affects <= 5.0.28 Patched in 5.0.29
4. Medium · 5.3 Church Admin <= 5.0.26 - Missing Authorization ↗
   2025-08-22 CVE-2025-57896 Missing Authorization Affects <= 5.0.26 Patched in 5.0.27
5. Medium · 5.3 Church Admin <= 5.0.9 - Unauthenticated Information Disclosure ↗
   2025-04-16 CVE-2025-39553 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 5.0.9 Patched in 5.0.10
6. Medium · 6.4 Church Admin <= 5.0.23 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2025-04-16 CVE-2025-39555 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.0.23 Patched in 5.0.24
7. High · 7.5 Church Admin <= 5.0.18 - Unauthenticated SQL Injection ↗
   2025-03-13 CVE-2025-26941 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 5.0.18 Patched in 5.0.19
8. Medium · 5.3 Church Admin <= 5.0.8 - Missing Authorization ↗
   2024-12-02 CVE-2024-53795 Missing Authorization Affects <= 5.0.8 Patched in 5.0.9
9. Medium · 6.1 Church Admin < 5.0.0 - Reflected Cross-Site Scripting ↗
   2024-10-24 CVE-2024-50438 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 5.0.0 Patched in 5.0.0
10. High · 8.8 Church Admin <= 4.4.6 - Authenticated (Subscriber+) Arbitrary File Upload ↗
    2024-07-04 CVE-2024-37418 Unrestricted Upload of File with Dangerous Type Affects <= 4.4.6 Patched in 4.4.7
11. Medium · 5.3 Church Admin <= 4.4.4 - Missing Authorization ↗
    2024-06-28 CVE-2024-37440 Missing Authorization Affects <= 4.4.4 Patched in 4.4.5
12. Medium · 6.4 Church Admin <= 4.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-06-17 CVE-2024-35764 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.4.4 Patched in 4.4.5
13. Medium · 5.5 Church Admin <= 4.3.6 - Authenticated (Admin+) Server-Side Request Forgery ↗
    2024-05-30 CVE-2024-35637 Server-Side Request Forgery (SSRF) Affects <= 4.3.6 Patched in 4.4.0
14. Medium · 4.3 Church Admin <= 4.1.32 - Cross-Site Request Forgery ↗
    2024-05-09 CVE-2024-34828 Cross-Site Request Forgery (CSRF) Affects <= 4.1.32 Patched in 4.2.0
15. Medium · 4.3 Church Admin <= 4.0.27 - Cross-Site Request Forgery ↗
    2024-04-11 CVE-2024-32090 Cross-Site Request Forgery (CSRF) Affects <= 4.0.27 Patched in 4.0.28
16. Medium · 4.3 Church Admin <= 4.1.6 - Missing Authorization ↗
    2024-04-05 CVE-2024-31281 Missing Authorization Affects <= 4.1.6 Patched in 4.1.7
17. High · 8.8 Church Admin <= 4.1.5 - Authenticated (Subscriber+) Arbitrary File Upload ↗
    2024-04-05 CVE-2024-31280 Unrestricted Upload of File with Dangerous Type Affects <= 4.1.5 Patched in 4.1.6
18. Medium · 4.3 Church Admin <= 4.1.7 - Cross-Site Request Forgery ↗
    2024-03-28 CVE-2024-30493 Cross-Site Request Forgery (CSRF) Affects <= 4.1.7 Patched in 4.1.8
19. Medium · 4.3 Church Admin <= 4.1.18 - Missing Authorization ↗
    2024-03-28 CVE-2024-30505 Missing Authorization Affects <= 4.1.18 Patched in 4.1.19
20. High · 8.8 Church Admin <= 4.0.27 - Authenticated (Contributor+) SQL Injection ↗
    2024-03-26 CVE-2024-30244 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 4.0.27 Patched in 4.0.28
21. Medium · 6.4 Church Admin <= 4.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via meta-text ↗
    2024-03-25 CVE-2024-30193 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.1.17 Patched in 4.1.18
22. Medium · 6.4 Church Admin <= 4.0.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode ↗
    2024-03-25 CVE-2024-30197 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 4.0.26 Patched in 4.0.27
23. Medium · 5.5 Church Admin <= 3.7.56 - Server-Side Request Forgery via church_admin_import_csv ↗
    2023-07-26 CVE-2023-38515 Server-Side Request Forgery (SSRF) Affects <= 3.7.56 Patched in 3.8.0
24. Medium · 6.1 Church Admin <= 3.7.29 - Reflected Cross-Site Scripting ↗
    2023-06-13 CVE-2023-34021 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.29 Patched in 3.7.30
25. Medium · 6.1 Church Admin <= 3.7.5 - Reflected Cross-Site Scripting ↗
    2023-04-18 CVE-2023-30782 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.5 Patched in 3.7.6
26. Medium · 4.3 Church Admin <= 3.4.134 - Cross-Site Request Forgery leading to Plugin Backup Disclosure ↗
    2022-03-07 CVE-2022-0833 Cross-Site Request Forgery (CSRF) Affects < 3.4.135 Patched in 3.4.135
27. High · 8.8 Church Admin < 1.2550 - Cross-Site Request Forgery ↗
    2018-02-14 CVE-2018-20971 Cross-Site Request Forgery (CSRF) Affects < 1.2550 Patched in 1.2550
28. Medium · 6.1 Church Admin < 0.810 - Stored Cross-Site Scripting ↗
    2015-05-22 CVE-2015-4127 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 0.810 Patched in 0.810

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 125 languages, 3 at 90% or more

Plus 101 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-09 900+ → 800+ down after 134 days in tier
2. 2026-03-28 1K+ → 900+ down after 30 days in tier
3. 2026-02-26 900+ → 1K+ up after 78 days in tier
4. 2025-12-10 1K+ → 900+ down after 63 days in tier
5. 2025-10-08 900+ → 1K+ up after 22 days in tier
6. 2025-09-16 700+ → 900+ up after 116 days in tier
7. 2025-05-23 800+ → 700+ down after 5 days in tier
8. 2025-05-18 900+ → 800+ down after 61 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• The Events Calendar 600K+ installs · 4.2★ · 2 shared tags A
• Timetable and Event Schedule by MotoPress 30K+ installs · 4.3★ · 2 shared tags A
• Appointment Hour Booking – Booking Calendar 10K+ installs · 4.9★ · 2 shared tags A
• Church Content – Sermons, Events and More 4K+ installs · 4.7★ · 2 shared tags A
• MembershipWorks – Membership, Events & Directory 2K+ installs · 4.3★ · 2 shared tags A
• MotoPress Appointment Booking 2K+ installs · 4.3★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Church Admin into a readme, a review or a deck. It updates itself.

Church Admin: 800+ active installs, 4.7★ (17 reviews). Plugin Pulse (WP Mayor), as of 2026-08-28. https://plugins.wpmayor.com/plugin/church-admin