CVE-2026-73345

HighCVSS 7.1

Published: 18/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

20th percentile - higher than 20% of all known CVEs

Summary

SQL Injection vulnerability in License Manager for WooCommerce versions up to 3.0.18. An attacker can inject malicious SQL code through the customer field.

Risk Assessment

Potential unauthorized access to the database, data theft, or data modification.

Recommendation

Update the plugin to the latest version that includes the fix.

Original NVD description (English source)

Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.