Plugin icon

WP Foodbakery

wp-foodbakery

Vulnerabilities:

6

Last Updated:

April 5, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-04-21
Title
WP FoodBakery <= 3.3 - Unauthenticated PHP Object Injection
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2025-02-10
Title
WP Foodbakery <= 4.7 - Authentication Bypass
Fixed in
No known fix
CVSS
9.8 (critical)
Published
2025-02-10
Title
WP Foodbakery < 4.8 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 4.8
CVSS
9.8 (critical)
Published
2025-02-10
Title
WP Foodbakery < 4.8 - Unauthenticated Privilege Escalation in foodbakery_registration_validation
Fixed in
Fixed in 4.8
CVSS
9.8 (critical)
Published
2025-02-10
Title
WP Foodbakery <= 4.8 - Reflected Cross-Site Scripting
Fixed in
No known fix
CVSS
6.1 (medium)
Published
2021-06-14
Title
FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.2
CVSS
6.1 (medium)