Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: orderable Clear all filters
TI-2026-00738 CVE-2026-0974 · GHSA-j4vj-fpx3-v8rx

Orderable <= 1.20.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

Priority MEDIUM 41

The Orderable – WordPress Restaurant Online Ordering System and Food Ordering Plugin plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check on the 'install_plugin' functi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00668 Published 2026-02-19 No fix listed CWE-862