FoodOrd – Online Food Ordering Ecosystem Security & Risk Analysis

wordpress.org/plugins/foodord

Food ordering ecosystem with delivery, pickup, toppings, and optional desktop, waiter and kds app.

10 active installs v1.3.54 PHP 8.0+ WP 6.4+ Updated Apr 15, 2026
food-deliveryfood-orderingonline-orderingrestaurantrestaurant-menu
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is FoodOrd – Online Food Ordering Ecosystem Safe to Use in 2026?

Generally Safe

Score 100/100

FoodOrd – Online Food Ordering Ecosystem has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 29d ago
Risk Assessment

The foodord plugin v1.3.39 exhibits a generally good security posture, with no known historical vulnerabilities or critical/high severity issues identified in taint analysis. The code demonstrates strong adherence to secure coding practices, evidenced by the exclusive use of prepared statements for SQL queries and a high percentage of properly escaped output. The presence of numerous nonce and capability checks further reinforces its security-conscious development.

However, a notable concern lies in the substantial attack surface exposed through AJAX handlers. Out of 36 AJAX handlers, 12 lack authentication checks. This presents a significant risk, as these handlers could be exploited by unauthenticated users to perform unintended actions. While taint analysis didn't reveal unsanitized paths, the sheer number of unprotected entry points remains a weakness that could be leveraged in conjunction with other potential vulnerabilities or misconfigurations.

The absence of any recorded vulnerabilities in its history is a positive indicator, suggesting a commitment to security. Nevertheless, the presence of unprotected AJAX endpoints is a critical oversight that could lead to vulnerabilities if not addressed. The plugin's strengths in SQL and output handling are commendable, but the unprotected AJAX handlers are a significant area of concern that needs immediate attention.

Key Concerns

  • Unprotected AJAX handlers
Vulnerabilities
None known

FoodOrd – Online Food Ordering Ecosystem Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

FoodOrd – Online Food Ordering Ecosystem Release Timeline

v1.3.54Current
v1.3.52
v1.3.51
v1.3.50
v1.3.49
v1.3.48
v1.3.47
v1.3.46
v1.3.45
v1.3.44
v1.3.43
v1.3.42
v1.3.41
v1.3.40
v1.3.39
v1.3.38
v1.3.37
v1.3.36
v1.3.35
v1.3.34
Code Analysis
Analyzed Apr 6, 2026

FoodOrd – Online Food Ordering Ecosystem Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
209
1507 escaped
Nonce Checks
59
Capability Checks
59
File Operations
4
External Requests
5
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

88% escaped1716 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

25 flows
handle_form_submission (admin/class-foodord-allergy-info.php:42)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
12 unprotected

FoodOrd – Online Food Ordering Ecosystem Attack Surface

Entry Points38
Unprotected12

AJAX Handlers 36

authwp_ajax_foodord_get_product_allergensadmin/class-foodord-allergy-info.php:143
noprivwp_ajax_foodord_get_product_allergensadmin/class-foodord-allergy-info.php:144
authwp_ajax_foodord_set_order_modefoodord.php:1472
noprivwp_ajax_foodord_set_order_modefoodord.php:1473
authwp_ajax_foodord_set_delivery_datefoodord.php:1530
noprivwp_ajax_foodord_set_delivery_datefoodord.php:1548
authwp_ajax_foodord_set_pickup_datefoodord.php:1568
noprivwp_ajax_foodord_set_pickup_datefoodord.php:1586
authwp_ajax_foodord_get_delivery_slotsfoodord.php:1606
noprivwp_ajax_foodord_get_delivery_slotsfoodord.php:1678
authwp_ajax_foodord_get_pickup_slotsfoodord.php:1752
noprivwp_ajax_foodord_get_pickup_slotsfoodord.php:1824
authwp_ajax_foodord_set_delivery_timefoodord.php:1898
authwp_ajax_foodord_set_pickup_timefoodord.php:1920
noprivwp_ajax_foodord_set_pickup_timefoodord.php:1942
noprivwp_ajax_foodord_set_delivery_timefoodord.php:2799
authwp_ajax_foodord_confirm_statusfoodord.php:2877
noprivwp_ajax_foodord_confirm_statusfoodord.php:2878
authwp_ajax_foodord_validate_locationpublic/class-foodord-location-modal.php:893
noprivwp_ajax_foodord_validate_locationpublic/class-foodord-location-modal.php:894
authwp_ajax_foodord_get_product_modalpublic/class-foodord-product-modal.php:60
noprivwp_ajax_foodord_get_product_modalpublic/class-foodord-product-modal.php:61
authwp_ajax_foodord_update_cart_quantitypublic/class-foodord-product-modal.php:64
noprivwp_ajax_foodord_update_cart_quantitypublic/class-foodord-product-modal.php:65
authwp_ajax_foodord_remove_cart_itempublic/class-foodord-product-modal.php:66
noprivwp_ajax_foodord_remove_cart_itempublic/class-foodord-product-modal.php:67
authwp_ajax_foodord_clear_cartpublic/class-foodord-product-modal.php:68
noprivwp_ajax_foodord_clear_cartpublic/class-foodord-product-modal.php:69
authwp_ajax_foodord_get_cart_itemspublic/class-foodord-product-modal.php:70
noprivwp_ajax_foodord_get_cart_itemspublic/class-foodord-product-modal.php:71
authwp_ajax_foodord_update_cart_item_notepublic/class-foodord-product-modal.php:72
noprivwp_ajax_foodord_update_cart_item_notepublic/class-foodord-product-modal.php:73
authwp_ajax_foodord_add_to_cartpublic/class-foodord-product-modal.php:76
noprivwp_ajax_foodord_add_to_cartpublic/class-foodord-product-modal.php:77
authwp_ajax_foodord_get_products_availabilitypublic/class-foodord-timed-products-frontend.php:22
noprivwp_ajax_foodord_get_products_availabilitypublic/class-foodord-timed-products-frontend.php:23

Shortcodes 2

[foodord_card] includes/class-foodord-card-shortcode.php:21
[foodord_products] includes/class-foodord-products-shortcode.php:28
WordPress Hooks 191
actionadmin_menuadmin/class-foodord-admin.php:158
actionadmin_menuadmin/class-foodord-admin.php:159
actionadmin_menuadmin/class-foodord-admin.php:162
actionadmin_menuadmin/class-foodord-admin.php:163
actionadmin_menuadmin/class-foodord-admin.php:164
actionadmin_menuadmin/class-foodord-admin.php:165
actionadmin_menuadmin/class-foodord-admin.php:166
actionadmin_menuadmin/class-foodord-admin.php:167
actionadmin_menuadmin/class-foodord-admin.php:168
actionadmin_menuadmin/class-foodord-admin.php:169
actionadmin_menuadmin/class-foodord-admin.php:170
actionadmin_enqueue_scriptsadmin/class-foodord-admin.php:171
filterwoocommerce_hidden_order_itemmetaadmin/class-foodord-admin.php:172
actionadmin_headadmin/class-foodord-admin.php:173
actioncurrent_screenadmin/class-foodord-admin.php:174
actionwp_enqueue_scriptsadmin/class-foodord-allergy-info.php:150
actionwp_footeradmin/class-foodord-allergy-info.php:151
actionadmin_initadmin/class-foodord-back-to-top.php:20
actionadmin_enqueue_scriptsadmin/class-foodord-deactivation-feedback.php:21
actionadmin_footer-plugins.phpadmin/class-foodord-deactivation-feedback.php:22
actionadmin_initadmin/class-foodord-delivery.php:64
actionadmin_enqueue_scriptsadmin/class-foodord-delivery.php:65
actionadmin_initadmin/class-foodord-integrations.php:22
actionadmin_post_foodord_save_integrationsadmin/class-foodord-integrations.php:23
actionadmin_initadmin/class-foodord-license.php:65
actionadmin_post_foodord_save_licenseadmin/class-foodord-license.php:66
actionadmin_enqueue_scriptsadmin/class-foodord-license.php:67
actionadmin_initadmin/class-foodord-pickup.php:51
actionadmin_enqueue_scriptsadmin/class-foodord-pickup.php:52
actionadmin_enqueue_scriptsadmin/class-foodord-product-layout.php:21
actionadmin_menuadmin/class-foodord-setup-wizard.php:30
actionadmin_initadmin/class-foodord-setup-wizard.php:31
actionadmin_initadmin/class-foodord-setup-wizard.php:32
actionadmin_enqueue_scriptsadmin/class-foodord-setup-wizard.php:33
filterwoocommerce_prevent_automatic_wizard_redirectadmin/class-foodord-setup-wizard.php:34
actionadmin_enqueue_scriptsadmin/class-foodord-shortcodes.php:31
actionadmin_initadmin/class-foodord-time-to-deliver.php:21
actionadmin_initadmin/class-foodord-time-to-pickup.php:21
actionadmin_menuadmin/class-foodord-timed-products-admin.php:25
actionadd_meta_boxesadmin/class-foodord-timed-products-admin.php:26
actionadmin_enqueue_scriptsadmin/class-foodord-timed-products-admin.php:28
actionadmin_noticesadmin/class-foodord-timed-products-admin.php:29
actionadmin_initadmin/class-foodord-timed-products-admin.php:30
filterscreen_options_show_screenadmin/class-foodord-timed-products-admin.php:31
actionrestrict_manage_postsadmin/class-foodord-timed-products-admin.php:35
actionpre_get_postsadmin/class-foodord-timed-products-admin.php:36
actionadmin_menuadmin/class-foodord-topping-sets.php:51
actionadmin_enqueue_scriptsadmin/class-foodord-topping-sets.php:52
actionadmin_post_foodord_save_topping_groupadmin/class-foodord-topping-sets.php:54
actionadmin_post_foodord_update_topping_groupadmin/class-foodord-topping-sets.php:55
actionadmin_initadmin/class-foodord-topping-sets.php:56
actionadmin_initadmin/class-foodord-topping-sets.php:57
actionadmin_enqueue_scriptsadmin/class-foodord-toppings.php:40
actionadmin_menuadmin/class-foodord-tweaks.php:54
actionadmin_initadmin/class-foodord-tweaks.php:56
actionadmin_enqueue_scriptsadmin/class-foodord-tweaks.php:58
filterwoocommerce_product_data_tabsadmin/product-data/class-foodord-product-data-allergens.php:44
actionwoocommerce_product_data_panelsadmin/product-data/class-foodord-product-data-allergens.php:45
actionadmin_enqueue_scriptsadmin/product-data/class-foodord-product-data-allergens.php:46
actionwoocommerce_process_product_metaadmin/product-data/class-foodord-product-data-allergens.php:47
filterwoocommerce_product_data_tabsadmin/product-data/class-foodord-product-data-topping-sets.php:25
actionwoocommerce_product_data_panelsadmin/product-data/class-foodord-product-data-topping-sets.php:26
actionadmin_enqueue_scriptsadmin/product-data/class-foodord-product-data-topping-sets.php:27
actionwoocommerce_process_product_metaadmin/product-data/class-foodord-product-data-topping-sets.php:28
actionadmin_noticesfoodord.php:126
filterthe_contentfoodord.php:315
actioninitfoodord.php:439
actionadmin_initfoodord.php:450
filterbody_classfoodord.php:787
filteris_rtlfoodord.php:816
actionadmin_enqueue_scriptsfoodord.php:824
actionwp_enqueue_scriptsfoodord.php:881
actionwp_enqueue_scriptsfoodord.php:917
actioninitfoodord.php:939
actionplugins_loadedfoodord.php:988
filterwoocommerce_is_purchasablefoodord.php:1000
filterwoocommerce_variation_is_purchasablefoodord.php:1024
filterwoocommerce_add_to_cart_validationfoodord.php:1048
actionplugins_loadedfoodord.php:1080
actionplugins_loadedfoodord.php:1120
actioninitfoodord.php:1170
actionplugins_loadedfoodord.php:1179
actionplugins_loadedfoodord.php:1196
actioninitfoodord.php:1212
actioninitfoodord.php:1221
actioninitfoodord.php:1229
actioninitfoodord.php:1241
actioninitfoodord.php:1253
actioninitfoodord.php:1265
actioninitfoodord.php:1277
actioninitfoodord.php:1289
actioninitfoodord.php:1301
actioninitfoodord.php:1313
actionwoocommerce_cart_calculate_feesfoodord.php:1324
actionwoocommerce_checkout_create_orderfoodord.php:1964
actionwoocommerce_checkout_create_orderfoodord.php:2157
filterwoocommerce_store_api_checkout_update_order_from_requestfoodord.php:2181
actionwoocommerce_store_api_checkout_order_processedfoodord.php:2248
actionwoocommerce_thankyoufoodord.php:2362
actionwoocommerce_thankyoufoodord.php:2371
actionwoocommerce_checkout_update_order_metafoodord.php:2411
filterwoocommerce_checkout_fieldsfoodord.php:2493
actionwpfoodord.php:2519
actionwp_enqueue_scriptsfoodord.php:2526
filterwoocommerce_order_formatted_billing_addressfoodord.php:2540
filterwoocommerce_get_order_item_totalsfoodord.php:2650
actionwoocommerce_admin_order_data_after_billing_addressfoodord.php:2724
filterwoocommerce_order_formatted_shipping_addressfoodord.php:2777
actioninitfoodord.php:2881
filterwoocommerce_cart_item_thumbnailfoodord.php:2887
filterbody_classfoodord.php:2893
filterbody_classfoodord.php:2904
actionwp_enqueue_scriptsfoodord.php:2917
actioninitfoodord.php:2944
filterwoocommerce_placeholder_img_srcfoodord.php:2994
actioninitincludes/class-foodord-card-block.php:20
actionwp_enqueue_scriptsincludes/class-foodord-mobile-cart.php:21
filterbody_classincludes/class-foodord-mobile-cart.php:22
actioninitincludes/class-foodord-products-block.php:21
actionenqueue_block_editor_assetsincludes/class-foodord-products-block.php:22
actioninitincludes/class-foodord-products-shortcode.php:21
actionrest_api_initincludes/class-foodord-rest-api.php:28
filterrest_post_dispatchincludes/class-foodord-rest-api.php:29
actionafter_switch_themeincludes/class-foodord-theme-demo-importer.php:56
actionadmin_initincludes/class-foodord-theme-demo-importer.php:57
actionadmin_noticesincludes/class-foodord-theme-demo-importer.php:58
actioninitincludes/class-foodord-timed-products.php:53
actiondeleted_postincludes/class-foodord-timed-products.php:55
actiontrashed_postincludes/class-foodord-timed-products.php:56
actionuntrashed_postincludes/class-foodord-timed-products.php:57
filterwp_get_attachment_image_attributesincludes/foodord-lazy-images.php:179
actionwoocommerce_login_form_endincludes/integrations/class-foodord-google-login.php:28
actionwoocommerce_register_form_endincludes/integrations/class-foodord-google-login.php:29
actionfoodord_after_mobile_login_buttonsincludes/integrations/class-foodord-google-login.php:30
actioninitincludes/integrations/class-foodord-google-login.php:31
actionwp_enqueue_scriptspublic/class-foodord-back-to-top-customizer.php:20
filterbody_classpublic/class-foodord-back-to-top-customizer.php:21
actioninitpublic/class-foodord-back-to-top-customizer.php:23
actionwp_enqueue_scriptspublic/class-foodord-checkout-country-toggle.php:22
filterwoocommerce_checkout_fieldspublic/class-foodord-checkout-country-toggle.php:23
filterwoocommerce_blocks_checkout_fieldspublic/class-foodord-checkout-country-toggle.php:25
actionwp_enqueue_scriptspublic/class-foodord-checkout-lock-address.php:23
filterwoocommerce_checkout_fieldspublic/class-foodord-checkout-lock-address.php:24
filterwoocommerce_default_address_fieldspublic/class-foodord-checkout-lock-address.php:25
filterwoocommerce_blocks_checkout_fieldspublic/class-foodord-checkout-lock-address.php:26
filterbody_classpublic/class-foodord-checkout-lock-address.php:27
actionwoocommerce_checkout_initpublic/class-foodord-checkout-lock-address.php:28
filterwoocommerce_store_api_checkout_update_customer_from_requestpublic/class-foodord-checkout-lock-address.php:29
actionwoocommerce_check_cart_itemspublic/class-foodord-checkout-validator.php:22
actionwoocommerce_checkout_processpublic/class-foodord-checkout-validator.php:23
filterwoocommerce_order_button_htmlpublic/class-foodord-checkout-validator.php:24
actionwp_enqueue_scriptspublic/class-foodord-checkout-validator.php:25
actionwoocommerce_before_checkout_formpublic/class-foodord-checkout-validator.php:26
actionwoocommerce_blocks_checkout_block_registrationpublic/class-foodord-checkout-validator.php:29
filterwoocommerce_store_api_checkout_update_order_from_requestpublic/class-foodord-checkout-validator.php:30
actionwp_enqueue_scriptspublic/class-foodord-checkout-validator.php:32
actionwoocommerce_cart_calculate_feespublic/class-foodord-delivery-fee.php:29
actionwp_enqueue_scriptspublic/class-foodord-delivery-pickup-toggle.php:24
actionwp_enqueue_scriptspublic/class-foodord-location-modal.php:59
actionwp_enqueue_scriptspublic/class-foodord-location-modal.php:61
actionwp_footerpublic/class-foodord-location-modal.php:62
filterwoocommerce_checkout_get_valuepublic/class-foodord-location-modal.php:67
actionwoocommerce_after_checkout_validationpublic/class-foodord-location-modal.php:70
actionwoocommerce_before_checkout_formpublic/class-foodord-location-modal.php:75
actionwoocommerce_before_checkout_formpublic/class-foodord-min-order-amount.php:30
filterwoocommerce_order_button_htmlpublic/class-foodord-min-order-amount.php:33
actionwoocommerce_checkout_processpublic/class-foodord-min-order-amount.php:36
actionwp_enqueue_scriptspublic/class-foodord-product-modal.php:57
filterwoocommerce_add_cart_item_datapublic/class-foodord-product-modal.php:80
filterwoocommerce_get_cart_item_from_sessionpublic/class-foodord-product-modal.php:81
filterwoocommerce_add_cart_itempublic/class-foodord-product-modal.php:82
actionwoocommerce_before_calculate_totalspublic/class-foodord-product-modal.php:83
filterwoocommerce_get_item_datapublic/class-foodord-product-modal.php:84
filterwoocommerce_cart_item_pricepublic/class-foodord-product-modal.php:87
filterwoocommerce_cart_item_subtotalpublic/class-foodord-product-modal.php:88
actionwoocommerce_checkout_create_order_line_itempublic/class-foodord-product-modal.php:89
filterwoocommerce_order_item_get_formatted_meta_datapublic/class-foodord-product-modal.php:92
actionwoocommerce_order_item_meta_endpublic/class-foodord-product-modal.php:93
filterwoocommerce_dropdown_variation_attribute_options_htmlpublic/class-foodord-product-modal.php:318
actionwp_enqueue_scriptspublic/class-foodord-scroll-categories-nav.php:31
actionfoodord_theme_after_headerpublic/class-foodord-scroll-categories-nav.php:39
actionwp_enqueue_scriptspublic/class-foodord-styling-frontend.php:25
actionwp_enqueue_scriptspublic/class-foodord-time-to-deliver-frontend.php:27
actionwoocommerce_checkout_before_customer_detailspublic/class-foodord-time-to-deliver-frontend.php:29
actionwp_enqueue_scriptspublic/class-foodord-time-to-pickup-frontend.php:27
actionwoocommerce_checkout_before_customer_detailspublic/class-foodord-time-to-pickup-frontend.php:29
filterwoocommerce_product_is_visiblepublic/class-foodord-timed-products-frontend.php:29
filterwoocommerce_variation_is_visiblepublic/class-foodord-timed-products-frontend.php:30
filterwoocommerce_cart_item_visiblepublic/class-foodord-timed-products-frontend.php:31
actionwoocommerce_cart_loaded_from_sessionpublic/class-foodord-timed-products-frontend.php:32
actionwoocommerce_single_variationtemplates/frontend/product-modal.php:251
Maintenance & Trust

FoodOrd – Online Food Ordering Ecosystem Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedApr 15, 2026
PHP min version8.0
Downloads2K

Community Trust

Rating100/100
Number of ratings3
Active installs10
Developer Profile

FoodOrd – Online Food Ordering Ecosystem Developer Profile

FoodOrd

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect FoodOrd – Online Food Ordering Ecosystem

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/foodord/assets/css/foodord-frontend.css/wp-content/plugins/foodord/assets/js/foodord-frontend.js
Script Paths
/wp-content/plugins/foodord/assets/js/foodord-frontend.js
Version Parameters
foodord/assets/css/foodord-frontend.css?ver=foodord/assets/js/foodord-frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
foodord-sidebarfoodord-sidebar-wrapperfoodord-frontend
Data Attributes
data-foodord-mode-toggledata-foodord-products-container
JS Globals
foodord_ajax_objectFoodOrdFrontendfoodord_frontend
Shortcode Output
[foodord_card][foodord_products]
FAQ

Frequently Asked Questions about FoodOrd – Online Food Ordering Ecosystem