Medium 6.3
2024-10-16< 4.2.1
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
4.4.2
Update to 4.4.2 or later to address 7 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2024-27959
WordPress APIExperts Square for WooCommerce Plugin <= 4.2.8 is vulnerable to Cross Site Scripting (XSS)
CVE-2022-47182
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress APIExperts Square for WooCommerce plugin <= 4.2 - Sensitive Information Disclosure vulnerability
WordPress APIExperts Square for WooCommerce plugin <= 4.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability