Cs Framework (Chimpstudio) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-03-07. Vendor: Chimpstudio.

CVEs of Cs Framework

• CVE-2024-12035 - CVSS 8.8 (high), 2025-03-07: The CS Framework plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cs_widget_file_delete()…
• CVE-2024-12036 - CVSS 7.5 (high), 2025-03-07: The CS Framework plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.9 via the get_widget_settings_json()…