FoodBoxBooker
FoodBoxBooker has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of August 2026. Their average CVSS score is 5.8, and the most serious one scores 7.3 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (50%). Other recurring categories include Improper Privilege Management.
Every one of the 2 issues recorded for FoodBoxBooker has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. FoodBoxBooker is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-16298FoodBoxBooker <= 1.0.6 - Privilege Escalation to Unauthenticated Arbitrary Password Reset
Read the full analysisVulnerability Records

FoodBoxBooker
Author
ThemetechMount
FoodboxBooker is an intuitive WordPress plugin designed specifically for food delivery businesses, tiffin services, and meal subscription providers. 🍱🥢 With this plugin, you can easily showcase your menus, manage customer orders, and streamline the food or tiffin ordering process. 🛍️🍛 🔗 Useful Links FoodboxBooker Demos Main Features of FoodboxBooker 🍱 Stunning Menu Display: Showcase your delicious offerings with customizable menu layouts. Add mouthwatering photos, detailed descriptions, and pricing to capture customers’ attention. ⚡ Quick Online Ordering: A user-friendly system for placing tiffin orders with just a few clicks, ensuring a hassle-free experience for your customers. 📆 Subscription-Based Services: Manage weekly or monthly meal plans effortlessly, allowing customers to enjoy regular tiffin deliveries without repeated orders. 💳 Easy Online Payment: Simplify the checkout process with built-in support for popular payment gateways, ensuring fast and secure transactions every time. 🎨 Flexible Customization Options: Personalize your menus with colors, fonts, and layouts that match your brand’s unique identity and charm. 🌍 Multi-Language Support: Reach a global audience by offering your services in multiple languages, making your business more inclusive and accessible.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C