Read the docs

ChurcHope

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ChurcHope records in CISA KEV

No ChurcHope vulnerabilities are listed in CISA KEV.

Records

1 record

Priority HIGH 77

ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/download…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00817 Published 2026-10-20 Fixed in 2.2 CWE-22
Open these records in search →