Chimpstudio

Products

ProductCVEsExploitedLatest
WP Foodbakery6–Jul 22, 2026
FoodBakery3–Oct 10, 2026
WP Directorybox Manager2–Feb 13, 2025
CS Framework2–Mar 7, 2025
FoodBakery | Delivery Restaurant Directory WordPress Theme2–Mar 19, 2025
WP Real Estate Manager1–Mar 5, 2025
Foodbakery Sticky Cart1–May 19, 2025
JobHunt Job Alerts1–May 23, 2025

Exploited and recent CVEs

  • CVE-2026-78530 High 7.7 WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2026-15802 High 8.1 WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action 0.8%
  • CVE-2025-39536 High 8.2 WordPress JobHunt Job Alerts <= 3.6 - Arbitrary Content Deletion Vulnerability 0.4%
  • CVE-2025-32927 Critical 9.8 WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability 0.5%
  • CVE-2025-39356 Critical 9.8 WordPress Foodbakery Sticky Cart plugin <= 3.2 - PHP Object Injection vulnerability 0.5%
  • CVE-2024-12920 High 8.8 FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions 0.4%
  • CVE-2024-13933 High 8.8 FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions 0.2%
  • CVE-2024-12036 High 7.5 CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read 0.4%
  • CVE-2024-12035 High 8.8 CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion 0.9%
  • CVE-2025-1515 Critical 9.8 WP Real Estate Manager <= 2.8 - Authentication Bypass via Account Takeover 0.6%
  • CVE-2024-13182 Critical 9.8 WP Directorybox Manager <= 2.5 - Authentication Bypass 0.6%
  • CVE-2025-0181 Critical 9.8 WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request 0.6%
  • CVE-2025-0180 Critical 9.8 WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation 0.5%
  • CVE-2024-13010 Medium 6.1 WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting 0.3%
  • CVE-2024-13011 Critical 9.8 WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload 0.9%
  • CVE-2025-0316 Critical 9.8 WP Directorybox Manager <= 2.5 - Authentication Bypass 0.7%
  • CVE-2021-24389 Unrated FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS) 3.8%
  • CVE-2021-24389 Unrated FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS) 3.8%