CVE-2026-115959: WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
APIExperts Square for WooCommerceto a version that resolves this vulnerability.Fixed in 4.7.6
Event History
Frequently Asked Questions
Who can exploit this issue?
The CVSS vector indicates that exploitation can be performed remotely over the network without authentication or user interaction. The issue has low attack complexity.
What is the potential impact?
The reported impact is limited to integrity, with no stated confidentiality or availability impact. The vulnerability is classified as broken access control caused by missing authorization and incorrectly configured access-control security levels.
Which plugin versions are affected?
APIExperts Square for WooCommerce is reported as affected through version 4.7.5. The available information does not identify a fixed version.