Software License Manager

Software License Manager has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2021; all 4 are fixed as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high. 2021 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 2 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 4 issues recorded for Software License Manager has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, one record each. Software License Manager is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Software License Manager vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2021-20782

Software License Manager < 4.4.6 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

4 records


2021-09-13 00:00	Software License Manager <= 4.5.0 - Cross-Site Request Forgery leading to Arbitrary Domain Deletion Software License Manager < 4.5.1	`CVE-2021-24711`	4.3 Medium	Harald Eilertsen	Yes
2021-08-31 00:00	Software License Manager <= 4.4.9 - Authenticated (Admin+) Stored Cross-Site Scripting Software License Manager <= 4.4.9	`N/A`	5.5 Medium	WPScanTeam	Yes
2021-08-11 00:00	Software License Manager <= 4.4.7 - Reflected Cross-Site Scripting Software License Manager < 4.4.8	`CVE-2021-24560`	6.1 Medium	iohex	Yes
2021-07-08 00:00	Software License Manager < 4.4.6 - Cross-Site Request Forgery Software License Manager < 4.4.6	`CVE-2021-20782`	8.8 High	Koken Tokuda	Yes

Showing 1–4 of 4 reports

Latestv4.5.8

Software License Manager

Author

mra13 / Team Tips and Tricks HQ

4.6(35)

92/100

Last Updated

2026-08-17 (27d ago)

Active Installs

900+

Downloads

61,497

Requires WP

5.0+

Requires PHP

7.4.0+

Tested up to

WP 7.1

Created

2014-10-09 (12y ago)

Software license management solution for your web applications (WordPress plugins, Themes, PHP based membership script etc.) This plugin is very useful for creating a license server and doing the following via API: Create license keys in your system (license server) Check the status of a license key from from your application (remotely) Activate a license key from your application (remotely) Deactivate a license key (remotely) Check a license key (remotely) Track where the license key is being used. You can also create license keys manually from the admin dashboard of this plugin. Please note that this plugin is ONLY for developers Check license manager documentation to learn more. Integration with WP Express Checkout Plugin Check WP Express Checkout integration documentation Integration with WP eStore plugin Check WP eStore integration documentation Github repository https://github.com/Arsenal21/software-license-manager If you need some extra action hooks or filters for this plugin then let us know. Arbitrary section See the following sample/example for multi-site environment/setup: https://github.com/paratheme/Software-License-Manager-Multisite-licensed

View on WordPress.org