CVE-2026-115960: WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
APIExperts Square for WooCommerceto a version that resolves this vulnerability.Fixed in 4.7.6
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The vulnerability requires low-level privileges. It can be exploited over the network without user interaction.
What security impact is identified?
The reported impact is limited to integrity. No confidentiality or availability impact is identified in the provided severity vector.
Which plugin versions are affected?
APIExperts Square for WooCommerce versions through 4.7.5 are affected. The provided data does not identify a fixed version.