License Manager for WooCommerce

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

158 searches this plugin appeared in over the last 90 days, 20 listed. 115 left out as unrelated or noise (years, numbers, stray words). 1 of its tags isn't in the top 24 for their own search.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 92% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 9 months ago; a band this size takes about a year or more to cross, which places it about 50% of the way through.

1. ★★★★★ tracyandersonmd

   9mo ago

   I am admittedly accustomed to a faster response time to a problem, but once we got things going they stayed on top of it until it was fixed. The plugin itself has worked great.

   Read on wp.org ↗
2. ★★★★★ neoset

   10mo ago

   Excellent internal logic and an API system that works flawlessly. Great work, thank you for everything.

   Read on wp.org ↗
3. ★★★★★ jlc1964

   12mo ago

   It took me a while to get everything working correctly. Unfortunately, I started by watching a point and click setup video, which only confused me. That approach just doesn’t work for how my brain operates and I knew better! I should have gone straight to the developer documentation and GitHub files from the start. Overall, this plugin does exactly what it claims to do. Once I wrapped my head around the process and properly configured my own plugin to call the API correctly, it works great.Once I read through the Developer API documentation and got my own plugin to activate successfully, everything’s been fairly smooth!The only issue I am having is that: The documentation doesn’t show a true reactivation endpoint that reuses existing tokens. The /activate/ endpoint always creates new activation records. I do not like the clutter in the activation page everytime I deactivate and activate. I am trying to figure out how to activate on the same token so I don’t get all the clutter. This is not clear to me or maybe it is not a function? This topic was modified 8 months, 1 week ago by jlc1964. This topic was modified 8 months, 1 week ago by jlc1964. This topic was modified 8 months, 1 week ago by jlc1964. This topic was modified 8 months, 1 week ago by jlc1964.

   Read on wp.org ↗
4. ★★★★★ Grafiman

   1.2y ago

   I have not access to plugin after installation. This topic was modified 10 months, 3 weeks ago by Grafiman.

   Read on wp.org ↗
5. ★★★★★ lazy4

   1.7y ago

   First of all: we have not tested this plugin with themes or plugins for WordPress. So it may well be that it works well with wordpress-stuff. We wanted to use this plug-in to validate the licenses of our software.The way this plug-in was programmed is really miserable. The programmer obviously didn’t want to over-implement a single line of code and decided for the most trivial of implementations.For example: there is a value for ‘expires_at’ and a value for ‘valid for days’. But both fields exclude each other instead of the plugin is calculating the other value. So on the client side you first have to check which value comes back and then of course you have to implement two checks, one for each possible value.The plugin obviously does not perform any calculations, but only transmits static data from the database. A well-made plugin, where the programmer also thinks about the implementation, would return a calculated value for ‘days_remining’, regardless of which value was entered in WordPress. We purchased the pro-version but will give this plug-in up now. The example I described is just one trap you fall into when you have to query the API response yourself. This topic was modified 1 year, 4 months ago by lazy4.

   Read on wp.org ↗
6. ★★★★★ 92prisma92

   1.7y ago

   I am using this plugin on a site that sells software, and it works flawlessly.I was experiencing a problem with duplicate keys but thanks to the support I was able to trace the problem (which was not caused by this plugin but by another one) and resolved the issue.

   Read on wp.org ↗
7. ★★★★★ d3arts

   1.8y ago

   Very good plugin!

   Read on wp.org ↗
8. ★★★★★ Digital Challenge

   1.9y ago

   This is a great plugin for managing licenses. It works with no problems, and it has many filters to apply my own customizations. Great work!

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-07 Version 3.0.20 Tweak – Freemius SDK update 3.0.20
2. 2026-08-06 Version 3.0.19 Improved – Enhanced plugin security and stability. 3.0.19
3. 2026-06-30 Version 3.0.18 Tweak – Code improvement 3.0.18
4. 2026-05-21 Version 3.0.17 – Tweak – Compatible with WordPress Version 7.0 3.0.17
5. 2026-05-14 Version 3.0.16 Improved – Enhanced plugin security and stability. 3.0.16
6. 2025-12-08 Version 3.0.15 Tweak – Update UI/UX improvement 3.0.15

All 9 disclosed vulnerabilities are patched in the current version (3.0.20). Sites still on an older version should update.

1. Patched Medium · 6.5 License Manager for WooCommerce <= 3.0.18 - Authenticated (Customer+) SQL Injection ↗
   2026-08-18 CVE-2026-73345 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.0.18 Patched in 3.0.19
2. Patched Medium · 4.3 License Manager for WooCommerce <= 3.0.17 - Authenticated (Customer+) Arbitrary Content Deletion ↗
   2026-07-21 CVE-2026-61958 Missing Authorization Affects <= 3.0.17 Patched in 3.0.18
3. Patched Medium · 5.3 License Manager for WooCommerce <= 3.0.15 - Unauthenticated Insecure Direct Object Reference ↗
   2026-06-19 CVE-2026-56013 Authorization Bypass Through User-Controlled Key Affects <= 3.0.15 Patched in 3.0.16
4. Patched Medium · 4.9 License Manager for WooCommerce <= 3.0.12 - Authenticated (Administrator+) SQL Injection ↗
   2025-09-05 CVE-2025-58788 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.0.12 Patched in 3.0.13
5. Patched Medium · 6.1 License Manager for WooCommerce <= 3.0.9 - Reflected Cross-Site Scripting ↗
   2025-04-10 CVE-2025-32522 Improper Neutralization of Input During Web Page Generation Affects <= 3.0.9 Patched in 3.0.10
6. Patched Medium · 6.5 License Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure ↗
   2024-06-20 CVE-2024-1639 Missing Authorization Affects <= 3.0.6 Patched in 3.0.7
7. Patched High · 7.2 License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection ↗
   2023-11-23 CVE-2023-48742 Improper Neutralization of Special Elements used in an SQL Command Affects <= 2.2.10 Patched in 2.2.11
8. Patched Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
   2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation Affects 2.2.5 - 2.2.9 Patched in 2.3-beta.1
9. Patched Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
   2022-03-04 CVE-2022-4974 Missing Authorization Affects < 2.2.6 Patched in 2.2.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 27 languages, 1 at 90% or more

Plus 3 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-02-17 7K+ → 6K+ down after 329 days in tier
2. 2025-03-25 6K+ → 7K+ up after 1 days in tier
3. 2025-03-24 7K+ → 6K+ down after 1 days in tier
4. 2025-03-23 6K+ → 7K+ up after 649 days in tier
5. 2023-06-13 5K+ → 6K+ up after 1 days in tier
6. 2023-06-12 6K+ → 5K+ down after 1 days in tier
7. 2023-06-11 5K+ → 6K+ up after 1 days in tier
8. 2023-06-10 6K+ → 5K+ down after 79 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for License Manager for WooCommerce into a readme, a review or a deck. It updates itself.

License Manager for WooCommerce: 6K+ active installs, 4.6★ (147 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/license-manager-for-woocommerce