Cpe:2.3:a:nativechurch_project:nativechurch:*:*:*:*:*:wordpress:*:*

The NativeChurch WordPress theme before version 1.6.2 is vulnerable to unauthenticated path traversal via the download.php file parameter, allowing for the arbitrary download of sensitive system files.