WooCommerce Square vulnerabilities

2 known vulnerabilities in WooCommerce Square from WooCommerce. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  WooCommerce Square: Authorization Bypass Through User-Controlled Key

  CVE-2025-13457Jan 10, 2026WooCommerce

  The WooCommerce Square plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.1 via the get_token_by_id function due to missing validation on a user controlled key. This makes it possible for unauthenti

• 8.1 High severity

  WooCommerce Square: Authorization Bypass Through User-Controlled Key

  CVE-2023-35876Dec 20, 2023WooCommerce

  Authorization Bypass Through User-Controlled Key vulnerability in WooCommerce WooCommerce Square.This issue affects WooCommerce Square: from n/a through 3.8.1.