Skip to content
Path Traversal Vulnerabilities in Cherry Plugin and Churchope Theme for WordPress

Path Traversal Vulnerabilities in Cherry Plugin and Churchope Theme for WordPress

First seen 21 Oct 2026, 01:17 UTC •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 02:20 UTC
  • •Cherry Plugin and Churchope Theme for WordPress have critical path traversal vulnerabilities.
  • •Both vulnerabilities allow unauthorized access to restricted directories.
  • •Users are advised to update to the latest versions immediately.

Two separate path traversal vulnerabilities have been identified in the Cherry Plugin for WordPress (version 1.2.7) and the Churchope WordPress Theme (version 2.2). Both vulnerabilities are categorized under CWE-22, allowing attackers to potentially access restricted directories. The vulnerabilities were disclosed on October 21, 2026, but there is no indication of at this time. Users of the affected plugins are advised to update to the latest versions to mitigate risks. Specific CVEs have not been provided in the articles, and no proof-of-concept code has been reported. The scope of impact includes all installations of the affected versions. Current status indicates that users should prioritize patching to prevent potential exploitation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-21
Vulnerabilities disclosed
Path traversal vulnerabilities in Cherry Plugin 1.2.7 and Churchope Theme 2.2 were disclosed, affecting all installations of these versions.
VulnCheck
2026-10-21
Advisory published
VulnCheck published advisories for both vulnerabilities, urging users to apply patches.
VulnCheck

More articles in this cluster (2)

Extracted Entities (2)

1 / 3

Common questions

Which versions are affected?
Cherry Plugin version 1.2.7 and Churchope Theme version 2.2 are affected.
Is there any active exploitation reported?
No, there is currently no indication of active exploitation for these vulnerabilities.
What should users do?
Users should update to the latest versions of the Cherry Plugin and Churchope Theme to mitigate risks.