WP Foodbakery

Explore WP Foodbakery vulnerabilities across all versions. Currently tracking 10 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSHigh

8.3/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all WP Foodbakery vulnerabilities before they are exploited.

Vulnerability Records

10 records


2026-07-21 15:42	WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action WP Foodbakery <= 4.9	`CVE-2026-15802`	8.1 High	Rafie Muhammad	No
2025-04-21 00:00	WP FoodBakery <= 3.3 - Unauthenticated PHP Object Injection WP Foodbakery <= 3.3	`CVE-2025-32927`	9.8 Critical	Bonds	No
2025-03-18 00:00	FoodBakery \| Delivery Restaurant Directory WordPress Theme <= 4.7 - Cross-Site Request Forgery in Multiple Functions WP Foodbakery <= 4.7	`CVE-2024-13933`	8.8 High	Lucio Sá	No
2025-03-18 00:00	FoodBakery \| Delivery Restaurant Directory WordPress Theme <= 4.7 - Missing Authorization in Multiple Functions WP Foodbakery <= 4.7	`CVE-2024-12920`	8.8 High	Lucio Sá	Yes
2025-02-10 00:00	WP Foodbakery <= 4.7 - Unauthenticated Arbitrary File Upload WP Foodbakery <= 4.7	`CVE-2024-13011`	9.8 Critical	István Márton	Yes
2025-02-10 00:00	WP Foodbakery <= 4.7 - Unauthenticated Privilege Escalation in foodbakery_registration_validation WP Foodbakery <= 4.7	`CVE-2025-0180`	9.8 Critical	Tonn	Yes
2025-02-10 00:00	WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request WP Foodbakery <= 4.8	`CVE-2025-0181`	9.8 Critical	Tonn	No
2025-02-10 00:00	WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting WP Foodbakery <= 4.8	`CVE-2024-13010`	6.1 Medium	István Márton	No
2021-06-14 00:00	FoodBakery \| Delivery Restaurant Directory WordPress Theme <= 2.1 - Reflected Cross-Site Scripting WP Foodbakery <= 2.1	`CVE-2021-24389`	6.1 Medium	Truoc Phan	Yes
2020-07-24 00:00	FoodBakery <= 1.9 - Reflected Cross-Site Scripting WP Foodbakery <= 1.9	`N/A`	6.1 Medium	R3N0	Yes

Showing 1–10 of 10 reports