WordPress security by component

FoodBakery | Delivery Restaurant Directory

Theme description

FoodBakery | Delivery Restaurant Directory is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Mar 19, 2025; the highest CVE/CNA score is 8.8.

Theme slug: foodbakery-delivery-restaurant-directory-wordpress-theme

Latest vulnerability

CVE-2024-13933: FoodBakery | Delivery Restaurant Directory: Arbitrary file deletion

FoodBakery | Delivery Restaurant Directory is affected by arbitrary file deletion. The vulnerable path is reachable without authentication. A successful request can remove files outside the intended scope and may make the site unavailable.

PublishedMar 19, 2025

Safe version guidanceSee mitigation notes

		Safe version
Mar 19, 2025	CVE-2024-13933 FoodBakery \| Delivery Restaurant Directory: Arbitrary file deletion FoodBakery \| Delivery Restaurant Directory is affected by arbitrary file deletion. The vulnerable path is reachable without authentication. A successful request can remove files outside the intended scope and may make the site unavailable.	See mitigation notes	CVE8.8 NVDPending
Mar 19, 2025	CVE-2024-12920 FoodBakery \| Delivery Restaurant Directory: Arbitrary file deletion FoodBakery \| Delivery Restaurant Directory is affected by arbitrary file deletion. Exploitation requires at least subscriber-level access. A successful request can remove files outside the intended scope and may make the site unavailable.	See mitigation notes	CVE8.8 NVDPending