CS Framework vulnerabilities

2 known vulnerabilities in CS Framework from Chimpstudio. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  CS Framework: External Control of File Name or Path

  CVE-2024-12036Mar 7, 2025Chimpstudio

  The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via the get_widget_settings_json() function. This makes it possible for authenticated attackers, with subscriber-level access and above, to rea

• 8.8 High severity

  CS Framework: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-12035Mar 7, 2025Chimpstudio

  The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cs_widget_file_delete() function in all versions up to, and including, 6.9. This makes it possible for authenticated attackers, with