Nativechurch

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:imithemes:nativechurch:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorImithemes (33b2ef36-b205-51ef-a0b6-4f3fc28d7d97)
ProductNativechurch (fa222037-6d5a-5b18-94d5-8f7a18c6b286)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-125133 vulnerable 2026-11-03 10:14:09.184744 NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php
HIGH (7.5)
NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the file parameter of download.php. Attackers can send GET requests with directory traversal sequences in the file parameter to retrieve sensitive files like wp-config.php. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.
Published: 2026-10-20T20:31:22.824Z
Updated: 2026-10-23T15:33:12.495Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27408 vulnerable 2026-07-29 00:34:59.544918 WordPress NativeChurch theme < 4.9.5 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes NativeChurch nativechurch allows Reflected XSS.This issue affects NativeChurch: from n/a before 4.9.5.
Published: 2026-07-02T11:14:53.444Z
Updated: 2026-10-12T12:28:17.107Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.