Chimpstudio vulnerabilities
17 published CVEs name Chimpstudio among the affected products.
- Published CVEs
- 17
- Last 12 months
- 2
- Critical
- 8
- Known exploited
- 0
Critical 8High 7Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20211
- 202514
- 20262
Newest CVEs
- CVE-2026-78530
WordPress FoodBakery theme <= 4.6 - Arbitrary File Deletion vulnerability
Chimpstudio · FoodBakery
High7.7 - CVE-2026-15802
WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action
Chimpstudio · WP Foodbakery
High8.1 - CVE-2025-39536
WordPress JobHunt Job Alerts <= 3.6 - Arbitrary Content Deletion Vulnerability
Chimpstudio · JobHunt Job Alerts
High8.2 - CVE-2025-32927
WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability
Chimpstudio · FoodBakery
Critical9.8 - CVE-2025-39356
WordPress Foodbakery Sticky Cart plugin <= 3.2 - PHP Object Injection vulnerability
Chimpstudio · Foodbakery Sticky Cart
Critical9.8 - CVE-2024-12920
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions
Chimpstudio · FoodBakery | Delivery Restaurant Directory WordPress Theme
High8.8 - CVE-2024-13933
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions
Chimpstudio · FoodBakery | Delivery Restaurant Directory WordPress Theme
High8.8 - CVE-2024-12036
CS Framework <= 7.1 - Authenticated (Subscriber+) Arbitrary File Read
Chimpstudio · CS Framework
High7.5 - CVE-2024-12035
CS Framework <= 7.0 - Authenticated (Subscriber+) Arbitrary File Deletion
Chimpstudio · CS Framework
High8.8 - CVE-2025-1515
WP Real Estate Manager <= 2.8 - Authentication Bypass via Account Takeover
Chimpstudio · WP Real Estate Manager
Critical9.8
Products with the most CVEs
Most common weaknesses
- CWE-288 4
- CWE-22 Path traversal2
- CWE-502 Deserialization of untrusted data2
- CWE-79 Cross-site scripting (XSS)2
- CWE-862 Missing authorization2
- CWE-23 1
- CWE-269 Improper privilege management1
- CWE-352 Cross-site request forgery (CSRF)1
- CWE-434 Unrestricted file upload1
- CWE-73 External control of file name or path1