WS
Product
WooCommerce Square
by woocommerce · last CVE Jan 10, 2026
2
CVEs
0
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add WooCommerce Square to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-35876
8.1
1%
Dec 20
WordPress WooCommerce Square Plugin <= 3.8.1 is vulnerable to Insecure Direct Object References (IDOR)
Affected: through 3.8.1
CVE-2025-13457
7.5
0%
Jan 10
WooCommerce Square <= 5.1.1 - Unauthenticated Insecure Direct Object Reference to Sensitive Information Exposure in get_token_by_id
Affected: 4.2.0 before 4.2.3; 4.3.0 before 4.3.2; 4.4.0 before 4.4.2; 4.5.0 before 4.5.2; 4.6.0 before 4.6.4; 4.7.0 before 4.7.4; +4 more
Showing 2