CVE-2026-45211 - WordPress APIExperts Square for WooCommerce plugin <= 4.7.1

Back Back to CVE browser

HIGH

WordPress APIExperts Square for WooCommerce plugin <= 4.7.1 - SQL Injection vulnerability

Published May 12, 2026

8.5

HIGH

CVSS 3.1

EPSS 0.36%

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.7.1.

Affected products

Vendor Saad Iqbal Product APIExperts Square for WooCommerce Default
unaffected
Affected
- ≥ 0, ≤ 4.7.1

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Saad Iqbal	APIExperts Square for WooCommerce	unaffected	Affected ≥ 0, ≤ 4.7.1

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-29453		Advisory
https://patchstack.com/database/Wordpress/Plugin/woosquare/vulnerability/wordpress-apiexperts-square-for-woocommerce-plugin-4-7-1-sql-injection-vulnerability?_s_id=cve		vdb-entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Patchstack

Published May 12, 2026

Updated May 13, 2026

Reserved May 11, 2026

Link CVE-2026-45211

CISA Vulnrichment

Updated May 13, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2026-45211

Red Hat

No data

ENISA EUVD

Assigner Patchstack

Published May 12, 2026

Updated May 13, 2026

Link EUVD-2026-29453

GitHub

No data