Skip to content
OpenAdvisories

Vendor

Chimpstudio

17 known vulnerabilities.

Products

WP Foodbakery 6 FoodBakery 3 CS Framework 2 WP Directorybox Manager 2 FoodBakery | Delivery Restaurant Directory WordPress Theme 2 WP Real Estate Manager 1 JobHunt Job Alerts 1 Foodbakery Sticky Cart 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • High 7.7
    CVE-2026-78530

    WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability

    Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.

    Chimpstudio FoodBakery
  • High 8.1
    CVE-2026-15802

    WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action

    The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_backup_file_callback' function in all versions up to, and including, 4.9. This makes it possible for authenticate…

    Chimpstudio WP Foodbakery Web / CMS
  • High 8.2
    CVE-2025-39536

    WordPress JobHunt Job Alerts <= 3.6 - Arbitrary Content Deletion Vulnerability

    Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6.

    Chimpstudio JobHunt Job Alerts
  • High 8.8
    CVE-2024-12920

    FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions

    The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the foodbakery_var_backup_file_delete, foodbakery_widget_file_delete,…

    Chimpstudio FoodBakery | Delivery Restaurant Directory WordPress Theme Web / CMS
  • High 8.8
    CVE-2024-13933

    FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions

    The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.7. This is due to missing or incorrect nonce validation on the foodbakery_var_backup_file_de…

    Chimpstudio FoodBakery | Delivery Restaurant Directory WordPress Theme Web / CMS
  • High 7.5
    CVE-2024-12036

    CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read

    The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via the get_widget_settings_json() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to re…

    Chimpstudio CS Framework Web / CMS
  • High 8.8
    CVE-2024-12035

    CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion

    The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cs_widget_file_delete() function in all versions up to, and including, 6.9. This makes it possible for authenticated attackers, with…

    Chimpstudio CS Framework Web / CMS