Chimpstudio Foodbakery vulnerabilities

• chimpstudio foodbakery WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability CVE-2026-78530 7.7 HighOctober 10, 2026
• chimpstudio wp foodbakery WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action CVE-2026-15802 8.1 HighJuly 22, 2026
• chimpgroup foodbakery WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability CVE-2025-32927 9.8 CriticalMay 19, 2025
• chimpstudio foodbakery sticky cart WordPress Foodbakery Sticky Cart plugin <= 3.2 - PHP Object Injection vulnerability CVE-2025-39356 9.8 CriticalMay 19, 2025
• chimpstudio foodbakery | delivery restaurant directory wordpress theme FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions CVE-2024-12920 8.8 HighMarch 19, 2025
• chimpstudio foodbakery | delivery restaurant directory wordpress theme FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions CVE-2024-13933 8.8 HighMarch 19, 2025
• chimpstudio wp foodbakery WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request CVE-2025-0181 9.8 CriticalFebruary 11, 2025
• chimpstudio wp foodbakery WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation CVE-2025-0180 9.8 CriticalFebruary 11, 2025
• chimpstudio wp foodbakery WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting CVE-2024-13010 6.1 MediumFebruary 10, 2025
• chimpstudio wp foodbakery WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload CVE-2024-13011 9.8 CriticalFebruary 10, 2025
• chimpgroup foodbakery, chimpstudio wp foodbakery +1 more FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS) CVE-2021-24389 6.1 MediumJuly 6, 2021