Skip to content
OpenAdvisories
High · 7.1 CVE-2026-42709 EUVD-2026-96444GHSA-c4q9-q8mr-88fg

WordPress Food Menu – Restaurant Menu & Online Ordering for WooCommerce plugin <= 6.0.5 - Cross Site Scripting (XSS) vulnerability

Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack

Vendor: RadiusTheme Product: Food Menu – Restaurant Menu & Online Ordering for WooCommerce Category: Web / CMS

Description

Unauthenticated Cross Site Scripting (XSS) in Food Menu – Restaurant Menu & Online Ordering for WooCommerce <= 6.0.5 versions.

Affected products

VendorProductAffectedFixed
RadiusTheme Food Menu – Restaurant Menu & Online Ordering for WooCommerce ≤ 6.0.5 —

References