CVE-2014-125133

The NativeChurch theme for WordPress, in versions prior to 1.6.2 , is susceptible to a path traversal vulnerability in the download.php component. This flaw allows unauthenticated attackers to use directory traversal sequences within the file parameter to perform arbitrary file downloads . A prac...