CVE-2026-56013: Mycred License Manager For Woocommerce

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Unauthenticated Insecure Direct Object References (IDOR) in License Manager for WooCommerce <= 3.0.15 versions.

Affected products

• Mycred License Manager For Woocommerce: up to and including 3.0.15

Published 2026-06-25. Last modified 2026-06-29.