Live › vulnerability › CVE-2026-115959
Go to dashboardThe APIExperts Square for WooCommerce WordPress plugin is missing an authorization check, so access controls are not enforced as intended. Per the NVD description, an attacker can exploit incorrectly configured access control levels in versions through 4.7.5.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 11:29 UTC. All times on this page are UTC.
Sites running the WooCommerce Square integration plugin (woosquare) at version 4.7.5 or older. The sources do not say which configurations make the missing check reachable, so treat any site with the plugin installed as in scope. Sites without the plugin can skip it.
No product ranges from the sources yet.
wp plugin get woosquare --field=version) and see whether it is 4.7.5 or older.4.7.5 once the vendor publishes one; the sources do not name a fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-115959")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.