These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The CVE-2026-78530 vulnerability is related to an arbitrary file deletion issue in the FoodBakery theme version 4.6 or earlier. This issue has been publicly disclosed and has a high CVSS score of 7.7. The vulnerability allows a subscriber to delete arbitrary files, which could potentially lead to data loss or other security issues.
The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete_locations_backup_file_callback' function in all versions up to, and including, 4.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the [truncated]