Plugin icon

WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce

woosquare

Vulnerabilities:

6

Last Updated:

July 2, 2026

Active Installs:

900

Published
Title
Fixed in
CVSS
Published
2026-07-09
Title
WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce < 4.7.5 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 4.7.5
CVSS
6.5 (medium)
Published
2026-06-18
Title
WC Shop Sync – Square Payment Gateway and Product Synchronization for WooCommerce < 4.7.4 - Unauthenticated Information Exposure
Fixed in
Fixed in 4.7.4
CVSS
5.3 (medium)
Published
2026-03-16
Title
APIExperts Square for WooCommerce < 4.7.2 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 4.7.2
CVSS
4.9 (medium)
Published
2024-03-13
Title
APIExperts Square for WooCommerce < 4.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.3
CVSS
6.1 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.2.9
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 4.2.1
CVSS
4.3 (medium)