Filtered by vendor Wpexperts Subscriptions
Filtered by product License Manager For Woocommerce Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-1639 1 Wpexperts 1 License Manager For Woocommerce 2024-11-21 6.5 Medium
The License Manager for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the showLicenseKey() and showAllLicenseKeys() functions in all versions up to, and including, 3.0.7. This makes it possible for authenticated attackers, with admin dashboard access (contributors by default due to WooCommerce) to view arbitrary decrypted license keys. The functions contain a referrer nonce check. However, these can be retrieved via the dashboard through the "license" JS variable.
CVE-2023-48742 1 Wpexperts 1 License Manager For Woocommerce 2024-11-21 7.6 High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in LicenseManager License Manager for WooCommerce license-manager-for-woocommerce allows SQL Injection.This issue affects License Manager for WooCommerce: from n/a through 2.2.10.