High · 8.5 CVE-2026-57810 EUVD-2026-43422GHSA-hcwm-5655-jr8j

WordPress APIExperts Square for WooCommerce plugin <= 4.7.4 - SQL Injection vulnerability

Published Jul 13, 2026 · Updated Jul 13, 2026 · Assigned by Patchstack

Vendor: Saad Iqbal Product: APIExperts Square for WooCommerce Category: Web / CMS

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.7.4.

Affected products

Vendor	Product	Affected	Fixed
Saad Iqbal	APIExperts Square for WooCommerce	≤ 4.7.4	—

References

https://patchstack.com/database/Wordpress/Plugin/woosquare/vulnerability/wordpress-apiexperts-square-for-woocommerce-plugin-4-7-4-sql-injection-vulnerability?_s_id=cve vdb-entry