chimpgroup records

8 published records for vendor chimpgroup.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2022-0316Proof of concept	Multiple themes - Unauthenticated Arbitrary File Uploadaidreform project · aidreform · CWE-434 Pre-auth File upload	Critical9.8	—	2.1%	Jan 23, 2023
39Monitor	CVE-2024-11286No exploit	WP JobHunt <= 7.1 - Authentication Bypasschimpgroup · jobcareer · CWE-288 Pre-auth Auth bypass	Critical9.8	—	0.6%	Mar 14, 2025
39Monitor	CVE-2024-11284No exploit	WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeoverchimpgroup · jobcareer · CWE-639 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Mar 14, 2025
39Monitor	CVE-2025-32927No exploit	WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerabilitychimpgroup · foodbakery · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.4%	May 19, 2025
39Monitor	CVE-2024-11285No exploit	WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeoverchimpgroup · jobcareer · CWE-639 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Mar 14, 2025
32Monitor	CVE-2024-12810No exploit	JobCareer \| Job Board Responsive WordPress Theme <= 7.1 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrative Actionschimpgroup · jobcareer · CWE-862 Broken access control (IDOR)	High8.1	—	0.3%	Mar 14, 2025
30Monitor	CVE-2024-11283No exploit	WP JobHunt <= 7.1 - Authentication Bypass to Candidatechimpgroup · jobcareer · CWE-289 Pre-auth Auth bypass	High7.5	—	0.4%	Mar 14, 2025
25Monitor	CVE-2021-24389Proof of concept	FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)chimpgroup · foodbakery · CWE-79 Pre-auth XSS	Medium6.1	—	3.7%	Jul 6, 2021

CVE-2022-0316
40Plan
Multiple themes - Unauthenticated Arbitrary File Upload
CriticalCVSS 9.8Proof of conceptEPSS 2%
- Pre-auth
- File upload
aidreform project · aidreformJan 23, 2023
CVE-2024-11286
39Monitor
WP JobHunt <= 7.1 - Authentication Bypass
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
chimpgroup · jobcareerMar 14, 2025
CVE-2024-11284
39Monitor
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
chimpgroup · jobcareerMar 14, 2025
CVE-2025-32927
39Monitor
WordPress FoodBakery plugin <= 3.3 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
chimpgroup · foodbakeryMay 19, 2025
CVE-2024-11285
39Monitor
WP JobHunt <= 7.1 - Unauthenticated Privilege Escalation via Email Update/Account Takeover
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
chimpgroup · jobcareerMar 14, 2025
CVE-2024-12810
32Monitor
JobCareer | Job Board Responsive WordPress Theme <= 7.1 - Missing Authorization to Authenticated (Subscriber+) Multiple Administrative Actions
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
chimpgroup · jobcareerMar 14, 2025
CVE-2024-11283
30Monitor
WP JobHunt <= 7.1 - Authentication Bypass to Candidate
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
chimpgroup · jobcareerMar 14, 2025
CVE-2021-24389
25Monitor
FoodBakery < 2.2 - Reflected Cross-Site Scripting (XSS)
MediumCVSS 6.1Proof of conceptEPSS 3%
- Pre-auth
- XSS
chimpgroup · foodbakeryJul 6, 2021