FoodBakery WordPress Theme Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the FoodBakery | Delivery Restaurant Directory WordPress Theme, affecting all versions through 4.7. The vulnerability arises from inadequate nonce validation in several functions, allowing unauthenticated attackers to delete files, modify theme options, and manage widget data by tricking an administrator into responding to a forged request.

Impact

Exploitation of this vulnerability could lead to unauthorized file deletions and modifications of theme and widget settings.