PT-2026-52423 · WordPress · Square For Woocommerce

·

CVE-2026-54848

·

Published

2026-06-25

·

Updated

2026-06-26

CVSS v3.1

8.3

High

VectorAV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions APIExperts Square for WooCommerce versions prior to 4.7.4
Description An issue allows the retrieval of embedded sensitive data due to the insertion of sensitive information into sent data. This flaw is network-exploitable and requires no authentication.
Recommendations Update to a version newer than 4.7.3.

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-54848

Affected Products

Square For Woocommerce