CVE-2026-110367: WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
APIExperts Square for WooCommerceto a version that resolves this vulnerability.Fixed in 4.7.6
Event History
Frequently Asked Questions
Which deployments are affected?
APIExperts Square for WooCommerce versions through 4.7.5 are affected. The available information does not identify a safe fixed version.
Can this be exploited remotely without an account or user interaction?
The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the expected impact?
The reported impact is limited to integrity, meaning an attacker may be able to make unauthorized changes. No confidentiality or availability impact is identified in the supplied CVSS vector.