SQL Injection Vulnerability in License Manager for WooCommerce by Inactive Apps
CVE-2026-73345

7.1HIGH

Key Information:

Vendor

WordPress
Status
License Manager For WooCommerce
Vendor
CVE Published:
18 August 2026

What is CVE-2026-73345?

A vulnerability has been identified in the License Manager for WooCommerce plugin, specifically affecting versions up to 3.0.18. This flaw allows attackers to exploit SQL injection weaknesses, potentially enabling unauthorized access to sensitive data within the database. It is crucial for users of this plugin to update to the latest version to mitigate the risks associated with this security issue.

Affected Version(s)

License Manager for WooCommerce <= 3.0.18

References

https://patchstack.com/database/wordpress/plugin/license-...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

rootdirective.sec | Patchstack Bug Bounty Program
.