Flipdish Ordering System
Flipdish Ordering System has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).
The one issue recorded for Flipdish Ordering System has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nabil Irawan. Flipdish Ordering System is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-30601Flipdish Ordering System <= 1.5.2 - Cross-Site Request Forgery to Settings Update
Read the full analysisVulnerability Records

Flipdish Ordering System
Author
flipdish
The Flipdish WordPress plugin lets restaurants add the Flipdish online ordering system to their website with ease. Customise your ordering system to a dark or light theme or remove the background colours entirely. Visit https://flipdish.com/ for more info or https://portal.flipdish.com/ to set up your account. Check out our help desk to learn more about our platform and additional integrations to take your business to the next level. You can also talk to our sales team to learn more about what we can offer and get you setup. Localization English (default) – always included .pot file (flipdish-ordering-system.pot) for translators is also always included 🙂 Your translation? – Just send it in Translations English – default, always included Our Customers Flipdish allows my customers to go from address to order completion in a very few amount of clicks. Easy to edit and update menu items. – Shane Crilly – Base Pizza Flipdish are the best partner for your takeaway. They helped me to increase total orders & also migrate customers away from costly third party portals. – Ben Macari – Macari’s We are very happy with making the move to Flipdish. The transition was very smooth and our customers have responded extremely well to our new app. – Karl Butler – Mao at Home License This plugin is licensed under the GPLv2 or later.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C