Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Chimp Group Component: Foodbakery Clear all filters
TI-2025-23948 CVE-2025-32927 · GHSA-rr7m-4h79-q5qx

WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Chimpstudio FoodBakery wp-foodbakery allows Object Injection.This issue affects FoodBakery: from n/a through <= 3.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-05-19 No fix listed CWE-502
TI-2021-06681 CVE-2021-24389 · GHSA-w88c-8753-jmrg

FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)

Priority LOW 34

The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter before outputting it back in the response, leading to an unauthen…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03753 Published 2021-07-06 Fixed in 2.2 CWE-79