WordPress Authentic theme suffers from an arbitrary file download vulnerability. Note that this finding houses site-specific data.