CVE-2014-125133

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

CVE-2014-125133 NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

EUVD-2014-9826

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

CVE-2014-125133 NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

CVE-2014-125133

The NativeChurch theme for WordPress (versions before 1.6.2 ) is vulnerable to a path traversal vulnerability. Unauthenticated attackers can exploit the file parameter of download.php by sending GET requests containing directory traversal sequences. This allows for the arbitrary download of sensi...

PT-2026-118677

Name of the Vulnerable Software and Affected Versions NativeChurch theme for WordPress versions prior to 1.6.2 Description An issue allows unauthenticated attackers to download arbitrary files via the 'download.php' endpoint. By sending GET requests containing directory traversal sequences in the...

VulnCheck KEV: CVE-2014-125133

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

Imithemes NativeChurch path traversal vulnerability

Versions prior to 1.6.2 of imithemes NativeChurch contain a path traversal vulnerability. This vulnerability allows unauthenticated attackers to send GET requests containing directory traversal sequences via the file parameter in download.php. As a result, they can download arbitrary files and...

CVE-2014-125133: Improper Limitation of a Pathname to a Restricted Directory

NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve...

WordPress NativeChurch Theme - Local File Inclusion Detection

WordPress NativeChurch Theme is vulnerable to local file inclusion in the download.php file. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress NativeChurch Theme is vulnerable to local file inclusion in the download.""" from kittysploit import from lib.protocols.http.httpclient import...

NativeChurch <= 4.8.8.2 - Reflected Cross-Site Scripting

Description The NativeChurch theme for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.8.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that...

CVE-2026-27408

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in imithemes NativeChurch nativechurch allows Reflected XSS.This issue affects NativeChurch: from n/a before 4.9.5...

CVE-2026-27408 WordPress NativeChurch theme < 4.9.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in imithemes NativeChurch nativechurch allows Reflected XSS.This issue affects NativeChurch: from n/a before 4.9.5...

CVE-2026-27408

Unauthenticated Cross Site Scripting XSS in NativeChurch = 4.8.8.2 versions...

CVE-2026-27408 WordPress NativeChurch theme < 4.9.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in imithemes NativeChurch nativechurch allows Reflected XSS.This issue affects NativeChurch: from n/a before 4.9.5...

EUVD-2026-41330

Unauthenticated Cross Site Scripting XSS in NativeChurch = 4.8.8.2 versions...

CVE-2026-27408

CVE-2026-27408 affects WordPress NativeChurch theme versions

CVE-2026-27408: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in imithemes NativeChurch nativechurch allows Reflected XSS.This issue affects NativeChurch: from n/a before 4.9.5...

WordPress NativeChurch theme <= 4.8.8.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Theme NativeChurch versions = 4.8.8.2...

PT-2026-54974

Name of the Vulnerable Software and Affected Versions NativeChurch versions prior to 4.8.8.3 Description An unauthenticated Cross Site Scripting XSS issue exists, allowing attackers to execute malicious scripts without authentication. Recommendations Update NativeChurch to a version newer than...