Skip to content
OpenAdvisories

Product · Chimpstudio

CS Framework

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2024-12036

    CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read

    The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via the get_widget_settings_json() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to re…

    Chimpstudio CS Framework Web / CMS
  • High 8.8
    CVE-2024-12035

    CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion

    The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cs_widget_file_delete() function in all versions up to, and including, 6.9. This makes it possible for authenticated attackers, with…

    Chimpstudio CS Framework Web / CMS