Home / Vulnerability Intelligence / CVE-2026-45211

CVE-2026-45211 - Vulnerability Analysis

HighCVSS: 8.5

Last Updated: May 12, 2026

Saad Iqbal APIExperts Square for WooCommerce - SQL Injection

Published: May 12, 2026Updated: May 12, 2026Remote Exploitable

Overview

Saad Iqbal APIExperts Square for WooCommerce <= 4.7.1 contains a sql injection caused by improper neutralization of special elements in SQL commands, letting attackers perform blind SQL injection remotely, exploit requires crafted requests.

Severity & Score

Severity: High

CVSS Score: 8.5

EPSS Score: 3.0%(Probability of exploitation in next 30 days)

Impact

Attackers can execute arbitrary SQL queries, potentially leading to data disclosure or modification.

Mitigation

Update to the latest version beyond 4.7.1.

References

https://patchstack.com/database/Wordpress/Plugin/woosquare/vulnerability/wordpress-apiexperts-square-for-woocommerce-plugin-4-7-1-sql-injection-vulnerability?_s_id=cve

Social Media Activity(2 posts)

TheHackerWire

@thehackerwire

May 12, 2026

🟠 CVE-2026-45211 - High (8.5) Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-45211/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

TheHackerWire

@thehackerwire

May 12, 2026

View original post

Related Resources

Details

CVE ID: CVE-2026-45211
Severity: High
CVSS Score: 8.5
Type: sql_injection
Status: rejected
EPSS: 3.0%
Social Posts: 2

CWE

CWE-89

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

EPSS Score

3.0%Probability of exploitation in the next 30 days