License Manager for WooCommerce

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 92% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.

1. ★★★★★ tracyandersonmd

   7mo ago

   I am admittedly accustomed to a faster response time to a problem, but once we got things going they stayed on top of it until it was fixed. The plugin itself has worked great.

   Read on wp.org ↗
2. ★★★★★ neoset

   8mo ago

   Excellent internal logic and an API system that works flawlessly. Great work, thank you for everything.

   Read on wp.org ↗
3. ★★★★★ jlc1964

   10mo ago

   It took me a while to get everything working correctly. Unfortunately, I started by watching a point and click setup video, which only confused me. That approach just doesn’t work for how my brain operates and I knew better! I should have gone straight to the developer documentation and GitHub files from the start. Overall, this plugin does exactly what it claims to do. Once I wrapped my head around the process and properly configured my own plugin to call the API correctly, it works great.Once I read through the Developer API documentation and got my own plugin to activate successfully, everything’s been fairly smooth!The only issue I am having is that: The documentation doesn’t show a true reactivation endpoint that reuses existing tokens. The /activate/ endpoint always creates new activation records. I do not like the clutter in the activation page everytime I deactivate and activate. I am trying to figure out how to activate on the same token so I don’t get all the clutter. This is not clear to me or maybe it is not a function? This topic was modified 8 months, 1 week ago by jlc1964. This topic was modified 8 months, 1 week ago by jlc1964. This topic was modified 8 months, 1 week ago by jlc1964. This topic was modified 8 months, 1 week ago by jlc1964.

   Read on wp.org ↗
4. ★★★★★ Grafiman

   1.0y ago

   I have not access to plugin after installation. This topic was modified 10 months, 3 weeks ago by Grafiman.

   Read on wp.org ↗
5. ★★★★★ lazy4

   1.5y ago

   First of all: we have not tested this plugin with themes or plugins for WordPress. So it may well be that it works well with wordpress-stuff. We wanted to use this plug-in to validate the licenses of our software.The way this plug-in was programmed is really miserable. The programmer obviously didn’t want to over-implement a single line of code and decided for the most trivial of implementations.For example: there is a value for ‘expires_at’ and a value for ‘valid for days’. But both fields exclude each other instead of the plugin is calculating the other value. So on the client side you first have to check which value comes back and then of course you have to implement two checks, one for each possible value.The plugin obviously does not perform any calculations, but only transmits static data from the database. A well-made plugin, where the programmer also thinks about the implementation, would return a calculated value for ‘days_remining’, regardless of which value was entered in WordPress. We purchased the pro-version but will give this plug-in up now. The example I described is just one trap you fall into when you have to query the API response yourself. This topic was modified 1 year, 4 months ago by lazy4.

   Read on wp.org ↗
6. ★★★★★ 92prisma92

   1.6y ago

   I am using this plugin on a site that sells software, and it works flawlessly.I was experiencing a problem with duplicate keys but thanks to the support I was able to trace the problem (which was not caused by this plugin but by another one) and resolved the issue.

   Read on wp.org ↗
7. ★★★★★ d3arts

   1.6y ago

   Very good plugin!

   Read on wp.org ↗
8. ★★★★★ Digital Challenge

   1.7y ago

   This is a great plugin for managing licenses. It works with no problems, and it has many filters to apply my own customizations. Great work!

   Read on wp.org ↗

Recent releases and news for this plugin

1. 2026-08-07 Version 3.0.20 Tweak – Freemius SDK update 3.0.20
2. 2026-08-06 Version 3.0.19 Improved – Enhanced plugin security and stability. 3.0.19
3. 2026-06-30 Version 3.0.18 Tweak – Code improvement 3.0.18
4. 2026-05-21 Version 3.0.17 – Tweak – Compatible with WordPress Version 7.0 3.0.17
5. 2026-05-14 Version 3.0.16 Improved – Enhanced plugin security and stability. 3.0.16
6. 2025-12-08 Version 3.0.15 Tweak – Update UI/UX improvement 3.0.15

9 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 6.5 License Manager for WooCommerce <= 3.0.18 - Authenticated (Customer+) SQL Injection ↗
   2026-08-18 CVE-2026-73345 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.0.18 Patched in 3.0.19
2. Medium · 4.3 License Manager for WooCommerce <= 3.0.17 - Authenticated (Customer+) Arbitrary Content Deletion ↗
   2026-07-21 CVE-2026-61958 Missing Authorization Affects <= 3.0.17 Patched in 3.0.18
3. Medium · 5.3 License Manager for WooCommerce <= 3.0.15 - Unauthenticated Insecure Direct Object Reference ↗
   2026-06-19 CVE-2026-56013 Authorization Bypass Through User-Controlled Key Affects <= 3.0.15 Patched in 3.0.16
4. Medium · 4.9 License Manager for WooCommerce <= 3.0.12 - Authenticated (Administrator+) SQL Injection ↗
   2025-09-05 CVE-2025-58788 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.0.12 Patched in 3.0.13
5. Medium · 6.1 License Manager for WooCommerce <= 3.0.9 - Reflected Cross-Site Scripting ↗
   2025-04-10 CVE-2025-32522 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.0.9 Patched in 3.0.10
6. Medium · 6.5 License Manager for WooCommerce <= 3.0.6 - Improper Authorization to Authenticated(Contributor+) Sensitive Information Exposure ↗
   2024-06-20 CVE-2024-1639 Missing Authorization Affects <= 3.0.6 Patched in 3.0.7
7. High · 7.2 License Manager for WooCommerce <= 2.2.10 - Authenticated (Administrator+) SQL Injection ↗
   2023-11-23 CVE-2023-48742 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 2.2.10 Patched in 2.2.11
8. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
   2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 2.2.5 - 2.2.9 Patched in 2.3-beta.1
9. Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
   2022-03-04 CVE-2022-4974 Missing Authorization Affects < 2.2.6 Patched in 2.2.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Translated into 27 languages, 1 at 90% or more

Plus 3 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-02-17 7K+ → 6K+ down after 329 days in tier
2. 2025-03-25 6K+ → 7K+ up after 1 days in tier
3. 2025-03-24 7K+ → 6K+ down after 1 days in tier
4. 2025-03-23 6K+ → 7K+ up after 649 days in tier
5. 2023-06-13 5K+ → 6K+ up after 1 days in tier
6. 2023-06-12 6K+ → 5K+ down after 1 days in tier
7. 2023-06-11 5K+ → 6K+ up after 1 days in tier
8. 2023-06-10 6K+ → 5K+ down after 79 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Google for WooCommerce 800K+ installs · 2.8★ · 1 shared tag B
• WooCommerce PayPal Payments 800K+ installs · 2.9★ · 1 shared tag B
• WooCommerce Stripe Payment Gateway 700K+ installs · 3.1★ · 1 shared tag B
• WooCommerce Tax (formerly WooCommerce Shipping & Tax) 500K+ installs · 2.2★ · 1 shared tag C
• WooCommerce Legacy REST API 400K+ installs · 2.2★ · 1 shared tag D
• PDF Invoices & Packing Slips for WooCommerce 300K+ installs · 4.9★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for License Manager for WooCommerce into a readme, a review or a deck. It updates itself.

License Manager for WooCommerce: 6K+ active installs, 4.6★ (147 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/license-manager-for-woocommerce