ChurcHope path traversal vulnerability

The ChurchHope theme for WordPress versions prior to 2.2 has a path traversal vulnerability. This vulnerability stems from the file parameter in /wp-content/themes/churchope/lib/downloadlink.php, which allows for path traversal. This could allow unauthorized attackers to download arbitrary files...