A Cross-Site Request Forgery (CSRF) vulnerability exists in WPExperts APIExperts Square for WooCommerce (woosquare) versions up to 4.7.5. This vulnerability allows an attacker to perform unauthorized actions on behalf of an authenticated user by exploiting the lack of proper request validation.