food_store_online_food_delivery_pickup vulnerabilities
CVEs whose affected-version data names the food_store_online_food_delivery_pickup package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-116622High· 7.2Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_time' Cookie
The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'service_time' parameter in all versions up to, and including, 1.5.5 due to insufficient input sanitization and outp…
▾ Twilightwpscripts · Food Store – Online Food Delivery & PickupEPSS 0.24%via CVEORG
CVE-2026-96669High· 7.2Food Store <= 1.5.5 - Unauthenticated Stored Cross-Site Scripting via 'service_type' Cookie
The Food Store – Online Food Delivery & Pickup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'service_type' Cookie in all versions up to, and including, 1.5.5 due to insufficient input sanitization and output esca…
▾ Twilightwpscripts · Food Store – Online Food Delivery & PickupEPSS 0.30%via CVEORG