Skip to content
Threat Feed
Subscribe

Product

ChurcHope (< 2.2)

1 brief RSS
high threat

ChurcHope WordPress Theme: Arbitrary file download via path traversal (CVE-2014-125134)

The ChurcHope theme for WordPress before version 2.2 is vulnerable to an unauthenticated path traversal attack, allowing remote adversaries to read arbitrary files from the host server.

ChurcHope wordpress path-traversal web-application-attack
1r 2t 1c