Skip to content
Threat Feed
Subscribe

Product

NativeChurch Theme (< 1.6.2)

1 brief RSS
high threat

NativeChurch WordPress theme path traversal (CVE-2014-125133)

The NativeChurch WordPress theme before version 1.6.2 is vulnerable to unauthenticated path traversal via the download.php file parameter, allowing for the arbitrary download of sensitive system files.

NativeChurch theme web-application-vulnerability wordpress path-traversal
1r 1t 1c