SEPTEMBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-57810

HIGH · CVSS 8.5 EPSS 0.21%

Source: NVD + CISA KEV + EPSS · Published 2026-07-13 · Last synced 2026-08-12

CyberRota Analysis

AI-Generated

The vulnerability in APIExperts Square for WooCommerce allows for blind SQL injection due to improper neutralization of special elements in SQL commands, potentially enabling attackers to manipulate database queries. This could lead to unauthorized data access or modification, posing a significant risk to the integrity and confidentiality of the affected systems. Organizations using versions up to 4.7.4 of this plugin should prioritize remediation to mitigate potential exploitation.

CVE
CVE-2026-57810
Severity
HIGH
CVSS
8.5
EPSS
0.21%

Original NVD Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal APIExperts Square for WooCommerce woosquare allows Blind SQL Injection.This issue affects APIExperts Square for WooCommerce: from n/a through <= 4.7.4.