CVE-2026-27408

CVE-2026-27408 affects WordPress NativeChurch theme versions

CVE-2026-27408 WordPress NativeChurch theme <= 4.8.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in NativeChurch = 4.8.8.2 versions...

WordPress NativeChurch theme <= 4.8.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme NativeChurch versions = 4.8.8.2...

WordPress NativeChurch Theme File Disclosure

File disclosure vulnerability in WordPress NativeChurch theme Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress NativeChurch theme arbitrary file download vulnerability

WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL.NativeChurch is a multi-purpose theme. An arbitrary file download vulnerability exists in the WordPress NativeChurch theme, which allows remote attackers to exploit...

NativeChurch Theme - Arbitrary File Download

Description The NativeChurch WordPress theme was affected by an Arbitrary File Download security vulnerability. PoC https://example.com/wp-content/themes/NativeChurch/download/download.php?file=../../../../wp-config.php...

NativeChurch Theme - Arbitrary File Download

Description The NativeChurch WordPress theme was affected by an Arbitrary File Download security vulnerability. https://example.com/wp-content/themes/NativeChurch/download/download.php?file=../../../../wp-config.php...