CVE-2026-15802 | High | 8.1 | 2026-07-22 | The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_backup_file_c… |
CVE-2025-39536 | High | 8.2 | 2025-05-23 | Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affec… |
CVE-2025-39356 | Critical | 9.8 | 2025-05-19 | Deserialization of Untrusted Data vulnerability in Chimpstudio Foodbakery Sticky Cart foodbakery-sticky-cart allows Object Injection.This issue affects Foodbak… |
CVE-2025-32927 | Critical | 9.8 | 2025-05-19 | Deserialization of Untrusted Data vulnerability in Chimpstudio FoodBakery wp-foodbakery allows Object Injection.This issue affects FoodBakery: from n/a through… |
CVE-2024-13933 | High | 8.8 | 2025-03-19 | The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu… |
CVE-2024-12920 | High | 8.8 | 2025-03-19 | The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to unauthorized access of data and modification of data due to… |
CVE-2024-12036 | High | 7.5 | 2025-03-07 | The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via the get_widget_settings_json() functio… |
CVE-2024-12035 | High | 8.8 | 2025-03-07 | The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cs_widget_file_delete() function… |
CVE-2025-1515 | Critical | 9.8 | 2025-03-05 | The WP Real Estate Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.8. This is due to insufficient i… |
CVE-2024-13182 | Critical | 9.8 | 2025-02-13 | The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5. This is due to incorrect aut… |
CVE-2025-0181 | Critical | 9.8 | 2025-02-11 | The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.8. This is due to the… |
CVE-2025-0180 | Critical | 9.8 | 2025-02-11 | The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.7. This is due to the plugin not properly… |
CVE-2024-13011 | Critical | 9.8 | 2025-02-10 | The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'upload_publisher_profile_image'… |
CVE-2024-13010 | Medium | 6.1 | 2025-02-10 | The WP Foodbakery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.8 due to insufficient input sanitiza… |
CVE-2025-0316 | Critical | 9.8 | 2025-02-08 | The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authent… |
CVE-2021-24389 | Medium | 6.1 | 2021-07-06 | The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter befo… |