CVE-2026-110367
CVE-2026-110367 · WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.
CVSS 5.3 · Medium · EPSS 0.2% · Fix available
- Published
- Updated
Affected products and versions
apiexperts square for woocommerce
- Versions
- ≥ 0, ≤ 4.7.5: Affected; ≥ 4.7.6: Not affected (custom)
Update to 4.7.6