WP Foodbakery vulnerabilities
4 known vulnerabilities in WP Foodbakery from Chimpstudio. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.1 High severity
WP Foodbakery: Relative Path Traversal
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_backup_file_callback' function in all versions up to, and including, 4.9. This makes it possible for authenticated
- 9.8 Critical severity
WP Foodbakery: Authentication Bypass Using an Alternate Path or Channel
The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.8. This is due to the plugin not properly validating a user's identity prior to setting the current user and their authent
- 9.8 Critical severity
WP Foodbakery: Improper Privilege Management
The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 4.7. This is due to the plugin not properly restricting what user meta can be updated during profile registration. This makes it possible for una
- 9.8 Critical severity
WP Foodbakery: Unrestricted Upload of File with Dangerous Type
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'upload_publisher_profile_image' function in versions up to, and including, 4.7. This makes it possible for unauthenticated attackers