CVE-2026-56013
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
The License Manager for WooCommerce plugin version 3.0.15 and earlier contains an unauthenticated Insecure Direct Object References (IDOR) vulnerability. This allows an attacker to access sensitive data without requiring authentication.
Risk Assessment
The risk involves unauthorized reading or modification of license data, potentially leading to a breach of confidentiality and integrity of the license management system.
Recommendation
It is recommended to immediately update the License Manager for WooCommerce plugin to the latest available version that fixes this vulnerability.
Other vulnerabilities in License Manager for WooCommerce
See all- CVE-2026-73345High
SQL Injection vulnerability in License Manager for WooCommerce versions up to 3.0.18. An attacker can inject malicious SQL code through the customer field.
- CVE-2026-61958Medium
The License Manager for WooCommerce WordPress plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 3.0.17.
Original NVD description (English source)
Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions.