CVE-2026-27408: WordPress NativeChurch theme < 4.9.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in imithemes NativeChurch nativechurch allows Reflected XSS.This issue affects NativeChurch: from n/a before 4.9.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress NativeChurch themeto a version that resolves this vulnerability.Fixed in 4.9.5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27408?
The severity of CVE-2026-27408 is rated as high with a score of 7.1.
How do I fix CVE-2026-27408?
To fix CVE-2026-27408, upgrade the WordPress NativeChurch theme to version 4.8.8.3 or newer.
What type of vulnerability is CVE-2026-27408?
CVE-2026-27408 is a reflected Cross Site Scripting (XSS) vulnerability.
Which versions of the NativeChurch theme are affected by CVE-2026-27408?
CVE-2026-27408 affects the NativeChurch theme versions up to and including 4.8.8.2.
Who is impacted by CVE-2026-27408?
Users of the NativeChurch WordPress theme who are running an affected version are at risk from CVE-2026-27408.