TI-2026-70437 CVE-2026-78530 · GHSA-8h49-8rvq-9vm7
Arbitrary file deletion in FoodBakery WordPress theme
Priority LOW 34
Subscriber Arbitrary File Deletion in FoodBakery <= 4.6 versions.
Vulnerabilities
15 records
TI-2026-13293 CVE-2026-15802 · GHSA-cjgw-jrh4-gfr3
Path traversal in Chimpstudio WP Foodbakery
Priority LOW 37
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_backup_file_callback' function in all versions up to, and including, 4.9.
TI-2025-26278 CVE-2025-39536 · GHSA-9w2j-w59m-592g
WordPress JobHunt Job Alerts <= 3.6 - Arbitrary Content Deletion Vulnerability
Priority MEDIUM 42
Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels.
TI-2025-26098 CVE-2025-39356 · GHSA-gjpm-x9rf-g2j2
WordPress Foodbakery Sticky Cart plugin <= 3.2 - PHP Object Injection vulnerability
Priority MEDIUM 49
Deserialization of Untrusted Data vulnerability in Chimpstudio Foodbakery Sticky Cart foodbakery-sticky-cart allows Object Injection.This issue affects Foodbakery Sticky Cart: from n/a through <= 3.2.
TI-2024-11971 CVE-2024-12920 · GHSA-x42h-35h8-j737
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions
Priority MEDIUM 40
The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the foodbakery_var_backup_file…
TI-2024-12950 CVE-2024-13933 · GHSA-378f-jx5r-r547
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions
Priority LOW 39
The FoodBakery | Delivery Restaurant Directory WordPress Theme theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.7.
TI-2024-11167 CVE-2024-12036 · GHSA-7pqp-c9f9-x39x
CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read
Priority LOW 39
The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via the get_widget_settings_json() function.
TI-2024-11166 CVE-2024-12035 · GHSA-v3r8-pp55-89hq
CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion
Priority MEDIUM 42
The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cs_widget_file_delete() function in all versions up to, and including, 6.9.
TI-2025-01304 CVE-2025-1515 · GHSA-fr4r-3jv7-ggh7
WP Real Estate Manager <= 2.8 - Authentication Bypass via Account Takeover
Priority MEDIUM 50
The WP Real Estate Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.8.
TI-2024-12228 CVE-2024-13182 · GHSA-rj86-9wrh-h84g
WP Directorybox Manager <= 2.5 - Authentication Bypass
Priority MEDIUM 50
The WP Directorybox Manager plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 2.5.
TI-2025-00140 CVE-2025-0181 · GHSA-f888-8h5m-7xjw
WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request
Priority MEDIUM 50
The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.8.
TI-2025-00139 CVE-2025-0180 · GHSA-q5xq-vwc2-mfrm
WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation
Priority MEDIUM 49
The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.7.
TI-2024-12059 CVE-2024-13010 · GHSA-jfwj-7vx3-vx6m
WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting
Priority LOW 27
The WP Foodbakery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.8 due to insufficient input sanitization and output escaping on the 'search_type' parameter.
TI-2024-12060 CVE-2024-13011 · GHSA-jrm5-c52r-qhm8
WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload
Priority MEDIUM 50
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'upload_publisher_profile_image' function in versions up to, and including, 4.7.
TI-2025-00255 CVE-2025-0316 · GHSA-fj85-459r-fjwq
WP Directorybox Manager <= 2.5 - Authentication Bypass
Priority MEDIUM 50
The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5.