ChurcHope vulnerabilities

CVEs whose affected-version data names the ChurcHope package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2014-125134High· 7.5

yesterday

ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.php

ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attacke…

▾ TwilightChurcHope · ChurcHopevia CVEORG