Security Advisory
CVE-2014-10397
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php.