CVE-2014-125134 | ChurcHope Plugin up to 2.1 downloadlink.php file path traversal

October 20, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in ChurcHope Plugin up to 2.1. The affected element is an unknown function of the file /wp-content/themes/churchope/lib/downloadlink.php. The manipulation of the argument File leads to path traversal.

This vulnerability is documented as CVE-2014-125134. The attack can be initiated remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More