5.3 Medium

CVE-2026-115959 Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting…

Description

Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects APIExperts Square for WooCommerce: from n/a through 4.7.5.

Affected products and versions

Product	Affected versions	Fixed in
APIExperts Square for WooCommerce 4.7	earliest → 4.7.5	No fix stated

The 4 CVEs of APIExperts Square for WooCommerce →

CVE-2026-119466 Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross… 5.4 Medium CVE-2026-115960 Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting… 4.3 Medium CVE-2026-110367 Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting… 5.3 Medium

Do you use APIExperts Square for WooCommerce?

Track this CVE Watch APIExperts Square for WooCommerce Check my SBOMs

www.cveye.io/en/cve/CVE-2026-115959

Timeline

Published October 26, 2026
Last modified October 26, 2026

References

patchstack.com patchstack.com

Track this CVE

CVE-2026-115959 Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting…

Description

Affected products and versions

Other CVEs of APIExperts Square for WooCommerce