TI-2014-08432 CVE-2014-125134 · GHSA-949v-g35q-94ph
Path traversal in ChurcHope WordPress theme lets attackers read files
Priority HIGH 77
ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/download…