WordPress security by component
APIExperts Square for WooCommerce
Plugin description
APIExperts Square for WooCommerce is a WordPress component with 5 published CVE records in this archive. The latest tracked vulnerability was published Jul 13, 2026; the highest CVE/CNA score is 8.5.
Plugin slug:
woosquareLatest vulnerability
CVE-2026-57810: APIExperts Square for WooCommerce: SQL injection
APIExperts Square for WooCommerce is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 4.7.4.
| Safe version |
|
||
|---|---|---|---|
| Jul 13, 2026 |
CVE-2026-57810
APIExperts Square for WooCommerce: SQL injection
APIExperts Square for WooCommerce is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 4.7.4.
|
4.7.5 |
CVE8.5
NVDPending
|
| Jun 25, 2026 |
CVE-2026-54848
APIExperts Square for WooCommerce: A security weakness
APIExperts Square for WooCommerce is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 4.7.3.
|
4.7.4 |
CVE8.3
NVDPending
|
| May 12, 2026 |
CVE-2026-45211
APIExperts Square for WooCommerce: SQL injection
APIExperts Square for WooCommerce is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 4.7.1.
|
4.7.2 |
CVE8.5
NVDPending
|
| Dec 13, 2024 |
CVE-2022-47182
APIExperts Square for WooCommerce: A security weakness
APIExperts Square for WooCommerce is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE5.3
NVDPending
|
| Mar 17, 2024 |
CVE-2024-27959
WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management: Cross-site scripting
WC Shop Sync – Integrate Square and WooCommerce for Seamless Shop Management is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVD6.1
|