{"id":"CVE-2025-58788","aliases":["EUVD-2025-26989","GHSA-j74j-vjh4-j967"],"status":"published","title":"WordPress License Manager for WooCommerce Plugin \u003c= 3.0.12 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Blind SQL Injection.This issue affects License Manager for WooCommerce: from n/a through \u003c= 3.0.12.","severity":{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00371,"percentile":0.31457,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-89"],"published":"2025-09-05T13:44:57Z","modified":"2026-10-05T14:10:00Z","exploits":[{"source":"pocgithub","id":"quetuan03/CVE-2025-58788","title":"quetuan03/CVE-2025-58788","date":"2025-10-01","url":"https://github.com/quetuan03/CVE-2025-58788"}],"products":[{"vendor":"saad iqbal","product":"license manager for woocommerce"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/license-manager-for-woocommerce/vulnerability/wordpress-license-manager-for-woocommerce-plugin-3-0-12-sql-injection-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58788"},{"url":"https://patchstack.com/database/wordpress/plugin/license-manager-for-woocommerce/vulnerability/wordpress-license-manager-for-woocommerce-plugin-3-0-12-sql-injection-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-j74j-vjh4-j967"}],"sources":{"cve":[{"id":"CVE-2025-58788","title":"WordPress License Manager for WooCommerce Plugin \u003c= 3.0.12 - SQL Injection Vulnerability","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Blind SQL Injection.This issue affects License Manager for WooCommerce: from n/a through \u003c= 3.0.12.","status":"published","published":"2025-09-05T13:44:57.285Z","modified":"2026-05-12T00:50:52.218Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"cna"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:32:37.027582Z"}],"euvd":[{"id":"EUVD-2025-26989","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Blind SQL Injection.This issue affects License Manager for WooCommerce: from n/a through \u003c= 3.0.12.","status":"published","published":"2025-09-05T13:44:57Z","modified":"2026-05-12T00:50:52Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"updated_at":"2026-11-02T19:04:39.077725Z"}],"ghsa":[{"id":"GHSA-j74j-vjh4-j967","title":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License Manager for WooCommerce allows Blind SQL Injection. This issue affects License Manager for WooCommerce: from n/a through 3.0.12.","status":"published","published":"2025-09-05T15:31:07Z","modified":"2025-09-05T15:31:16Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T15:03:29.995439Z"}],"nvd":[{"id":"CVE-2025-58788","description":"Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Saad Iqbal License Manager for WooCommerce license-manager-for-woocommerce allows Blind SQL Injection.This issue affects License Manager for WooCommerce: from n/a through \u003c= 3.0.12.","status":"published","published":"2025-09-05T14:15:46.977Z","modified":"2026-10-05T14:10:00.267Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-89"],"updated_at":"2026-11-02T14:11:27.145738Z"}]}}