Sourcecodester Online Food Ordering System vulnerabilities

5 CVEs affecting Sourcecodester Online Food Ordering System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-92385, published 2026-09-16.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-5811, published 2026-04-08. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in SourceCodester Online Food Ordering System 1.0. Affected by this issue is the function save_product of the file /Actions.php of the component POST Parameter Handler.…
CVE-2026-90855, published 2026-09-15. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in SourceCodester/katojkalemba Online Food Ordering System 1.0. This affects an unknown function of the file /web/order.php. This manipulation of the argument ID causes…
CVE-2026-90854, published 2026-09-15. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security flaw has been discovered in SourceCodester/katojkalemba Online Food Ordering System 1.0. The impacted element is an unknown function of the file /web/category-foods.php. The manipulation…
CVE-2026-92385, published 2026-09-16. Low severity, CVSS 2.4. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file /admin/update_category.php of the component Category Update.…
CVE-2026-10694, published 2026-06-03. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this issue is the function include of the file /index.php. The manipulation of the argument page results in…