CVE-2014-125134

The ChurcHope WordPress Theme (versions before 2.2 ) is vulnerable to a path traversal vulnerability within the /wp-content/themes/churchope/lib/downloadlink.php file. This flaw allows unauthenticated attackers to use the file parameter to supply directory traversal sequences and download arbitra...