Skip to content
Chimpstudio vulnerabilities
Newest
-
chimpstudio foodbakery
WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability
CVE-2026-78530
7.7 High
-
chimpstudio wp foodbakery
WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action
CVE-2026-15802
8.1 High
-
chimpstudio jobhunt job alerts
WordPress JobHunt Job Alerts <= 3.6 - Arbitrary Content Deletion Vulnerability
CVE-2025-39536
8.2 High
-
chimpgroup foodbakery
WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability
CVE-2025-32927
9.8 Critical
-
chimpstudio foodbakery sticky cart
WordPress Foodbakery Sticky Cart plugin <= 3.2 - PHP Object Injection vulnerability
CVE-2025-39356
9.8 Critical
-
chimpstudio foodbakery | delivery restaurant directory wordpress theme
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions
CVE-2024-12920
8.8 High
-
chimpstudio foodbakery | delivery restaurant directory wordpress theme
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions
CVE-2024-13933
8.8 High
-
chimpstudio cs framework
CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read
CVE-2024-12036
7.5 High
-
chimpstudio cs framework
CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion
CVE-2024-12035
8.8 High
-
chimpstudio wp real estate manager
WP Real Estate Manager <= 2.8 - Authentication Bypass via Account Takeover
CVE-2025-1515
9.8 Critical
-
chimpstudio wp directorybox manager
WP Directorybox Manager <= 2.5 - Authentication Bypass
CVE-2024-13182
9.8 Critical
-
chimpstudio wp foodbakery
WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request
CVE-2025-0181
9.8 Critical
-
chimpstudio wp foodbakery
WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation
CVE-2025-0180
9.8 Critical
-
chimpstudio wp foodbakery
WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting
CVE-2024-13010
6.1 Medium
-
chimpstudio wp foodbakery
WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload
CVE-2024-13011
9.8 Critical
-
chimpstudio wp directorybox manager
WP Directorybox Manager <= 2.5 - Authentication Bypass
CVE-2025-0316
Public exploit
9.8 Critical
-
chimpgroup foodbakery, chimpstudio wp foodbakery +1 more
FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)
CVE-2021-24389
6.1 Medium