Capella | Restaurant WordPress

Capella | Restaurant WordPress has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; 1 is fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 7.6, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 3 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (33%). Other recurring categories include Improper Privilege Management, SQL Injection.

1 of the records (33%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2026.

All of these findings were reported by Tran Nguyen Bao Khanh.

Strategic Overview

Avg CVSSHigh

7.6/ 10

Patch Coverage33%

Open

Fixed

Get automatic notifications for all Capella | Restaurant WordPress vulnerabilities before they are exploited.

Most severe open issueCVSS 7.5CVE-2025-15688

Capella | Restaurant WordPress <= 2.5.5 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

3 records


2026-08-20 00:00	Capella \| Restaurant WordPress <= 2.5.5 - Unauthenticated SQL Injection Capella <= 2.5.5	`CVE-2025-15688`	7.5 High	Tran Nguyen Bao Khanh	No
2026-08-20 00:00	Capella \| Restaurant WordPress <= 2.5.5 - Unauthenticated Privilege Escalation Capella <= 2.5.5	`CVE-2025-15689`	7.3 High	Tran Nguyen Bao Khanh	No
2026-01-29 00:00	Capella <= 2.5.5 - Unauthenticated PHP Object Injection Capella <= 2.5.5	`CVE-2025-69370`	8.1 High	Tran Nguyen Bao Khanh	Yes

Showing 1–3 of 3 reports