Read the docs

Chimp Group

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Chimp Group records in CISA KEV

No Chimp Group vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jobcareer 5 records MEDIUM Foodbakery 2 records MEDIUM Bolster 1 record HIGH Spikes 1 record HIGH Westand 1 record HIGH

Records

9 records

TI-2022-00245 CVE-2022-0316 · GHSA-j5h9-7hp2-65w5

Multiple themes - Unauthenticated Arbitrary File Upload

Priority HIGH 75

The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black W…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02106 Published 2023-01-23 Fixed in 2.1
TI-2024-10456 CVE-2024-11286 · GHSA-jmr6-wh5f-876q

WP JobHunt <= 7.1 - Authentication Bypass

Priority MEDIUM 50

The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00642 Published 2025-03-14 No fix listed CWE-288
TI-2025-23948 CVE-2025-32927 · GHSA-rr7m-4h79-q5qx

WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Chimpstudio FoodBakery wp-foodbakery allows Object Injection.This issue affects FoodBakery: from n/a through <= 3.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-05-19 No fix listed CWE-502
TI-2025-04496 CVE-2025-5014 · GHSA-x2c6-wc2f-wx6w

Home Villas | Real Estate WordPress Theme <= 2.8 - Authenticated (Subscriber+) Arbitrary File Deletion

Priority MEDIUM 42

The Home Villas | Real Estate WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wp_rem_cs_widget_file_delete' function in all versions up to, an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0083 Published 2025-07-02 No fix listed CWE-22
TI-2024-11871 CVE-2024-12810 · GHSA-p844-gjc4-j9h6

Missing authorization in JobCareer | Job Board Responsive WordPress Theme

Priority MEDIUM 40

The JobCareer | Job Board Responsive WordPress Theme theme for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00341 Published 2025-03-14 No fix listed CWE-862
TI-2024-10453 CVE-2024-11283 · GHSA-9p64-vwxm-hxqm

WP JobHunt <= 7.1 - Authentication Bypass to Candidate

Priority LOW 39

The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2025-03-14 No fix listed CWE-289
TI-2021-06681 CVE-2021-24389 · GHSA-w88c-8753-jmrg

FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)

Priority LOW 34

The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter before outputting it back in the response, leading to an unauthen…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03753 Published 2021-07-06 Fixed in 2.2 CWE-79
Open these records in search →