The Orderable plugin for WordPress contains a critical authorization flaw that allows authenticated users to install arbitrary plugins, posing a severe risk of remote code execution.

The vulnerability stems from a missing capability check within the install_plugin function, specifically located in class-ajax.php. This flaw allows any authenticated user, including those with Subscriber-level access, to perform unauthorized plugin installations.

Successful exploitation allows an attacker to install malicious plugins, which can lead to full site compromise and remote code execution. Given the CVSS score of 8.8, this vulnerability represents a high risk to business operations, potentially resulting in complete data loss, unauthorized access to sensitive customer information, and significant reputational damage.

Immediate Action: Update the Orderable plugin to the latest available version that includes the fix for this authorization bypass.

Proactive Monitoring: Monitor WordPress administrative logs for unexpected plugin installations or unauthorized modifications to the site configuration.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized requests to the vulnerable AJAX endpoint if immediate patching is not feasible.

Public Exploit Available: Unknown

Organizations utilizing the Orderable plugin must prioritize this update immediately. The ability for low-privileged users to install arbitrary code on a production system constitutes a critical security failure, and applying the vendor-supplied patch is the only effective way to neutralize this threat.