CVE-2026-73345
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
SQL Injection vulnerability in License Manager for WooCommerce versions up to 3.0.18. An attacker can inject malicious SQL code through the customer field.
Risk Assessment
Potential unauthorized access to the database, data theft, or data modification.
Recommendation
Update the plugin to the latest version that includes the fix.
Other vulnerabilities in License Manager for WooCommerce
See all- CVE-2026-61958Medium
The License Manager for WooCommerce WordPress plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 3.0.17.
- CVE-2026-56013Medium
The License Manager for WooCommerce plugin version 3.0.15 and earlier contains an unauthenticated Insecure Direct Object References (IDOR) vulnerability. This allows an attacker to access sensitive data without requiring authentication.
Original NVD description (English source)
Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS