orderable

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

orderable records in CISA KEV

No orderable vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-00738 CVE-2026-0974 · GHSA-j4vj-fpx3-v8rx

Orderable <= 1.20.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

MEDIUM 41

The Orderable – WordPress Restaurant Online Ordering System and Food Ordering Plugin plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the 'install_plugin' functi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00668 Published 2026-02-19 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0