CVE-2026-45211: WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.7.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-45211?
CVE-2026-45211 is classified as a critical SQL Injection vulnerability that can lead to unauthorized data access.
How do I fix CVE-2026-45211?
To fix CVE-2026-45211, update the APIExperts Square for WooCommerce plugin to version 4.7.2 or later.
What systems are affected by CVE-2026-45211?
CVE-2026-45211 affects versions of the APIExperts Square for WooCommerce plugin up to 4.7.1.
What kind of attack can be executed using CVE-2026-45211?
An attacker can exploit CVE-2026-45211 to execute Blind SQL Injection attacks, potentially revealing sensitive data.
Is CVE-2026-45211 being actively exploited?
There have been reports indicating that CVE-2026-45211 is being actively exploited in the wild.