SZB-3f0e64b619
WPExperts APIExperts Square for WooCommerce CSRF flaw (EUVD-2026-114190)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- WPExperts
- Product
- APIExperts Square for WooCommerce
- First seen
Summary
The EU Vulnerability Database lists a cross-site request forgery vulnerability in APIExperts Square for WooCommerce, scored 5.4 (CVSS v3.1). The listing says versions through 4.7.5 are affected.
If you use WPExperts
Update APIExperts Square for WooCommerce to a version later than 4.7.5
Check the installed plugin version in the WordPress admin plugin list
Stay logged out of WordPress admin when browsing untrusted sites
What the sources say 1
· Mastodon: “Cross-Site Request Forgery (CSRF) vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Cross Site Request Forgery.” Source