« Volver al listado

Wpexperts

Wpexperts License Manager FOR Woocommerce: vulnerabilidades y CVE

Wpexperts License Manager FOR Woocommerce tiene 7 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.

CVE7
Últimos 12 meses3
Críticas0
Explotadas activamente0

Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología

Últimas vulnerabilidades

CVESeveridadEPSSExplotación activaPublicadaDescripción
CVE-2026-73345Alta (7.1)0.29%—18 ago 2026
Customer SQL Injection in License Manager for WooCommerce <= 3.0.18 versions.
CVE-2026-61958Media (5.4)0.29%—13 jul 2026
Missing Authorization vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects License…
CVE-2026-56013Media (6.5)0.33%—25 jun 2026
Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions.
CVE-2025-58788Alta (7.6)0.37%—5 sept 2025
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Blind SQL Injection.This issue…
CVE-2025-32522Alta (7.1)0.29%—17 abr 2025
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Reflected XSS.This issue affects…
CVE-2024-1639Media (6.5)0.39%—21 jun 2024
The License Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the showLicenseKey() and showAllLicenseKeys() functions in all versions up to,…
CVE-2023-48742Alta (7.2)0.70%—30 nov 2023
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LicenseManager License Manager for WooCommerce license-manager-for-woocommerce allows SQL Injection.This issue…

🎯 Cómo se explota (técnicas ATT&CK)

  1. T1005 Data from Local System2
  2. T1210 Exploitation of Remote Services2
  3. T1059.007 JavaScript1
  4. T1189 Drive-by Compromise1

Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.

Otros productos de Wpexperts