Read the docs

Order Up

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Order Up records in CISA KEV

No Order Up vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 49

SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id par…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00414 Published 2026-02-23 No fix listed CWE-89
Open these records in search →