WooCommerce License Manager Unrestricted File Upload Vulnerability Allowing Web Shells

Vulnerability

A vulnerability in the WooCommerce License Manager plugin, specifically versions through 7.0.6, allows for unrestricted file uploads of dangerous types. This flaw can be exploited to upload a web shell to the server.

Impact

Exploitation of this vulnerability could lead to the upload of a web shell, allowing for remote code execution on the server.

Added: Mar 5, 2026, 6:30 AM
Updated: Mar 5, 2026, 6:30 AM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
4.8
remediation
0.0
relevance
3.5
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.