imithemes CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH imithemes CVE published 2026-07-02

CVE-2026-27408

A Cross Site Scripting (XSS) vulnerability exists in the WordPress NativeChurch theme prior to version 4.9.5. This issue allows for Reflected XSS attacks. The vulnerability has been publicly disclosed and has a CVSS score of 7.1, indicating a high severity. Defenders responsible for WordPress installations using the NativeChurch theme should assess their exposure and prioritize updating to version 4.9.5 o [truncated]