CVE WATCH / VULNERABILITY DETAIL
CVE-2014-125133
HIGHCVSS 7.5NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve sen
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog