Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: Chimp Group Clear all filters
TI-2025-04496 CVE-2025-5014 · GHSA-x2c6-wc2f-wx6w

Home Villas | Real Estate WordPress Theme <= 2.8 - Authenticated (Subscriber+) Arbitrary File Deletion

Priority MEDIUM 42

The Home Villas | Real Estate WordPress Theme theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wp_rem_cs_widget_file_delete' function in all versions up to, an…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0083 Published 2025-07-02 No fix listed CWE-22
TI-2025-23948 CVE-2025-32927 · GHSA-rr7m-4h79-q5qx

WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in Chimpstudio FoodBakery wp-foodbakery allows Object Injection.This issue affects FoodBakery: from n/a through <= 3.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00485 Published 2025-05-19 No fix listed CWE-502
TI-2024-11871 CVE-2024-12810 · GHSA-p844-gjc4-j9h6

Missing authorization in JobCareer | Job Board Responsive WordPress Theme

Priority MEDIUM 40

The JobCareer | Job Board Responsive WordPress Theme theme for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability checks on multiple functions in all versions up to…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00341 Published 2025-03-14 No fix listed CWE-862
TI-2024-10453 CVE-2024-11283 · GHSA-9p64-vwxm-hxqm

WP JobHunt <= 7.1 - Authentication Bypass to Candidate

Priority LOW 39

The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2025-03-14 No fix listed CWE-289
TI-2024-10456 CVE-2024-11286 · GHSA-jmr6-wh5f-876q

WP JobHunt <= 7.1 - Authentication Bypass

Priority MEDIUM 50

The WP JobHunt plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 7.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00642 Published 2025-03-14 No fix listed CWE-288
TI-2022-00245 CVE-2022-0316 · GHSA-j5h9-7hp2-65w5

Multiple themes - Unauthenticated Arbitrary File Upload

Priority HIGH 75

The WeStand WordPress theme before 2.1, footysquare WordPress theme, aidreform WordPress theme, statfort WordPress theme, club-theme WordPress theme, kingclub-theme WordPress theme, spikes WordPress theme, spikes-black W…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02106 Published 2023-01-23 Fixed in 2.1
TI-2021-06681 CVE-2021-24389 · GHSA-w88c-8753-jmrg

FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)

Priority LOW 34

The WP Foodbakery WordPress plugin before 2.2, used in the FoodBakery WordPress theme before 2.2 did not properly sanitize the foodbakery_radius parameter before outputting it back in the response, leading to an unauthen…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.03753 Published 2021-07-06 Fixed in 2.2 CWE-79