Known vulnerabilities in WooCommerce Square
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-13457 | The WooCommerce Square plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and… | 7.5 High | Jan 10, 2026 |
| CVE-2023-35876 | Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Square.This issue affects… | 8.1 High | Dec 20, 2023 |
Other WooCommerce products
AutomateWoo 5
woocommerce_customers_manager 5
WooCommerce Stripe Payment Gateway 5
woocommerce 4
WooCommerce PayPal Payments 3
Shipping Multiple Addresses 3
Product Vendors 3
WooCommerce Pre-Orders 2
WooCommerce Box Office 2
WooCommerce Bookings 2
WooCommerce Follow-Up Emails (AutomateWoo) 2
Product Add-Ons 2