Advisories · Technology

WPExperts APIExperts Square for WooCommerce.

Every CVE that names WPExperts APIExperts Square for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119466 CVE record

CVSS 5.4 Medium

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Cross Site Request Forgery (CSRF) vulnerability
- WPExperts APIExperts Square for WooCommerce
- Cross-site request forgery (CSRF)
Not analysed yet 30 Oct 2026
CVE-2026-115959 CVE record

CVSS 5.3 Medium

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
- WPExperts APIExperts Square for WooCommerce
- Broken access control
Not analysed yet 26 Oct 2026
CVE-2026-115960 CVE record

CVSS 4.3 Medium

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
- WPExperts APIExperts Square for WooCommerce
- Broken access control
Not analysed yet 26 Oct 2026
CVE-2026-110367 CVE record

CVSS 5.3 Medium

WordPress APIExperts Square for WooCommerce plugin <= 4.7.5 - Broken Access Control vulnerability
- WPExperts APIExperts Square for WooCommerce
- Broken access control
Not analysed yet 15 Oct 2026