Chimpstudio
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP Foodbakery | 6 | – | Jul 22, 2026 |
| FoodBakery | 3 | – | Oct 10, 2026 |
| WP Directorybox Manager | 2 | – | Feb 13, 2025 |
| CS Framework | 2 | – | Mar 7, 2025 |
| FoodBakery | Delivery Restaurant Directory WordPress Theme | 2 | – | Mar 19, 2025 |
| WP Real Estate Manager | 1 | – | Mar 5, 2025 |
| Foodbakery Sticky Cart | 1 | – | May 19, 2025 |
| JobHunt Job Alerts | 1 | – | May 23, 2025 |
Exploited and recent CVEs
- CVE-2026-78530 WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability 0.4%
- CVE-2026-15802 WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action 0.8%
- CVE-2025-39536 WordPress JobHunt Job Alerts <= 3.6 - Arbitrary Content Deletion Vulnerability 0.4%
- CVE-2025-32927 WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability 0.5%
- CVE-2025-39356 WordPress Foodbakery Sticky Cart plugin <= 3.2 - PHP Object Injection vulnerability 0.5%
- CVE-2024-12920 FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions 0.4%
- CVE-2024-13933 FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions 0.2%
- CVE-2024-12036 CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read 0.4%
- CVE-2024-12035 CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion 0.9%
- CVE-2025-1515 WP Real Estate Manager <= 2.8 - Authentication Bypass via Account Takeover 0.6%
- CVE-2024-13182 WP Directorybox Manager <= 2.5 - Authentication Bypass 0.6%
- CVE-2025-0181 WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request 0.6%
- CVE-2025-0180 WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation 0.5%
- CVE-2024-13010 WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting 0.3%
- CVE-2024-13011 WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload 0.9%
- CVE-2025-0316 WP Directorybox Manager <= 2.5 - Authentication Bypass 0.7%
- CVE-2021-24389 FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS) 3.8%
- CVE-2021-24389 FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS) 3.8%