CVE-2026-27408: Imithemes Nativechurch

High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated Cross Site Scripting (XSS) in NativeChurch <= 4.8.8.2 versions.

Affected products

• Imithemes Nativechurch: up to and including 4.8.8.2

Published 2026-07-02. Last modified 2026-07-02.