Live › vulnerability › CVE-2026-115960
Go to dashboardThe APIExperts Square for WooCommerce plugin for WordPress is missing an authorization check, so access control is not enforced on some functionality. The sources do not say exactly which action an attacker can perform.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 11:29 UTC. All times on this page are UTC.
Sites running the APIExperts Square for WooCommerce (woosquare) WordPress plugin at version or earlier, where WooCommerce is used with Square. The sources do not describe the specific configuration that makes a site exposed.
4.7.5No product ranges from the sources yet.
4.7.5; the exact patched version is unknownEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.
This page as .md · .json · in your agent: get_signal("CVE-2026-115960")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.