WordPress ChurcHope Responsive Themes version 4.7.x suffers from a directory traversal vulnerability.