WP Foodbakery

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   WP Foodbakery

Information

Software Type Plugin
Software Slug wp-foodbakery
Software Status Active
Software Author Chimpstudio
Software Website themeforest.net
Software Active Installs 4,000
Software Record Last Updated April 17, 2025

10 Vulnerabilities

Submit a Vulnerability
WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action
8.1
CVE-2026-15802
Jul 21, 2026
Researcher: Rafie Muhammad
WP FoodBakery <= 3.3 - Unauthenticated PHP Object Injection
9.8
CVE-2025-32927
Apr 21, 2025
Researcher: Bonds
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions
8.8
CVE-2024-13933
Mar 18, 2025
Researcher: Lucio Sá
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions
8.8
CVE-2024-12920
Mar 18, 2025
Researcher: Lucio Sá
WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload
9.8
CVE-2024-13011
Feb 10, 2025
Researcher: István Márton
WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting
6.1
CVE-2024-13010
Feb 10, 2025
Researcher: István Márton
WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request
9.8
CVE-2025-0181
Feb 10, 2025
Researcher: Tonn
WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation
9.8
CVE-2025-0180
Feb 10, 2025
Researcher: Tonn
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 2.1 - Reflected Cross-Site Scripting
6.1
CVE-2021-24389
Jun 14, 2021
Researcher: Truoc Phan
FoodBakery <= 1.9 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
Jul 24, 2020
Researcher: R3N0
Title Status CVE ID CVSS Researchers Date
WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action Unpatched CVE-2026-15802 8.1 Rafie Muhammad July 21, 2026
WP FoodBakery <= 3.3 - Unauthenticated PHP Object Injection Unpatched CVE-2025-32927 9.8 Bonds April 21, 2025
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions Unpatched CVE-2024-13933 8.8 Lucio Sá March 18, 2025
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions Patched CVE-2024-12920 8.8 Lucio Sá March 18, 2025
WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload Patched CVE-2024-13011 9.8 István Márton February 10, 2025
WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting Unpatched CVE-2024-13010 6.1 István Márton February 10, 2025
WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request Unpatched CVE-2025-0181 9.8 Tonn February 10, 2025
WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation Patched CVE-2025-0180 9.8 Tonn February 10, 2025
FoodBakery | Delivery Restaurant Directory WordPress Theme <= 2.1 - Reflected Cross-Site Scripting Patched CVE-2021-24389 6.1 Truoc Phan June 14, 2021
FoodBakery <= 1.9 - Reflected Cross-Site Scripting Patched 6.1 R3N0 July 24, 2020

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation