Vendor
The ThemeGrill eStore WordPress plugin contains a reflected cross-site scripting vulnerability (CVE-2026-108485) that allows attackers to execute arbitrary scripts in a user's browser session.