I have just patched the Church Admin today to v0.5900 to close a potential privacy issue.
All your church admin download links will only work if accessed directly from a link on your site.
www.yoursite.com?download=addresslist&member_type_id=1,2,3 will no longer work! It requires a special token the site generates when displaying the link
Please update immediately!