CVE-2026-116622

The Food Store – Online Food Delivery & Pickup plugin for WordPress (versions up to and including 1.5.5 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping of the 'service_time' parameter. This allows unauthenticated attacke...

EUVD-2026-113738

The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'servicetime' parameter in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated...