EUVD-2026-43422Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Network-reachable low-complexity SQLi needing a low-privilege account (PR:L); blind data read gives C:H with minor I:L, and I see no cross-authorization scope change (S:U) or availability impact.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L
Lifecycle Timeline
2DescriptionCVE.org
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.7.4.
Articles & Coverage 2
AnalysisAI
Blind SQL injection in the APIExperts "Square for WooCommerce" (woosquare) WordPress plugin affects all versions up to and including 4.7.4, allowing an authenticated attacker to inject crafted SQL into a database query and infer or extract data via boolean/time-based blind techniques. The flaw was reported by Patchstack and carries a CVSS 3.1 score of 8.5; no public exploit identified at time of analysis and it is not listed in CISA KEV. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a low-privileged authenticated session on the target WordPress site (CVSS PR:L), so the attacker must first hold or acquire valid credentials - commonly achievable where WooCommerce/WordPress self-service customer or subscriber registration is enabled. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The signals are moderately concerning but not top-tier emergency. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker registers or obtains a low-privilege account on a WooCommerce store running woosquare <= 4.7.4, then sends crafted HTTP requests to a vulnerable plugin endpoint with SQL metacharacters embedded in a parameter. Because the injection is blind, the attacker uses boolean or time-based conditions to iteratively extract sensitive data such as user credentials, order details, and secret keys from the WordPress database. … |
| Remediation | No vendor-released patched version is identified in the provided data (the issue affects versions through <= 4.7.4), so the primary action is to update woosquare to the first release above 4.7.4 as soon as the vendor publishes it and to monitor the Patchstack advisory (https://patchstack.com/database/Wordpress/Plugin/woosquare/vulnerability/wordpress-apiexperts-square-for-woocommerce-plugin-4-7-4-sql-injection-vulnerability?_s_id=cve) for the fixed version. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, audit current plugin version across all installations and restrict database query privileges for low-privileged user roles to minimum necessary permissions. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today