Skip to content
OpenAdvisories

Product · imithemes

NativeChurch

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2014-125133

    NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php

    NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequen…

    imithemes NativeChurch Web / CMS
  • High 7.1
    CVE-2026-27408

    WordPress NativeChurch theme < 4.9.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes NativeChurch nativechurch allows Reflected XSS.This issue affects NativeChurch: from n/a before 4.9.5.

    imithemes NativeChurch