CVE-2026-96669

{
  "etk_id": "ETK-2026-2944",
  "cve_id": "CVE-2026-96669",
  "display_id": "CVE-2026-96669",
  "ghsa_id": "GHSA-cx7q-6956-p3vx",
  "euvd_id": "EUVD-2026-112586",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Stored cross-site scripting in Food Store WordPress plugin",
  "summary": "Food Store – Online Food Delivery & Pickup for WordPress is affected through version 1.5.5. An unauthenticated visitor can cause script content to be stored and later executed when affected order information is viewed in the administration interface; public checkout access is the relevant exposure condition.",
  "mitigation": "Disable the plugin or limit public access to its checkout functionality until an updated release is available. Upgrade to a vendor release newer than 1.5.5 after confirming it addresses this issue.",
  "vendor": "wpscripts",
  "product": "Food Store – Online Food Delivery & Pickup",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 1.5.5"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Food Store – Online Food Delivery & Pickup",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "upstream",
  "exploit": false,
  "pipeline_minutes": 0.009795733333333334,
  "t0_at": "2026-10-29T03:39:13.993000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-29T07:02:24.014784+00:00",
      "days": 0.1410882150925926,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T03:39:13.993000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-29T03:39:13.993000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-29T03:39:13.993000+00:00",
      "url": "https://github.com/advisories/GHSA-cx7q-6956-p3vx"
    }
  }
}