Order Up vulnerabilities
We track 1 vulnerability in Order Up products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 23, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Order Up vulnerabilities
- 9.8 Critical severity
Online Ordering System: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensitive backend database data via a crafted store_id parameter in a POST request.