Security
فارسی
All products

dokan-lite

WordPress · Plugin
30 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Dokan <= 5.3.2 - Authenticated (Vendor+) Business Logic FlawCVE-2026-107776 dokan-lite WordPress Medium Fix reported
Dokan <= 5.3.2 - Unauthenticated Email SpoofingCVE-2026-107774 dokan-lite WordPress Medium Fix reported
Dokan <= 5.3.2 - Missing AuthorizationCVE-2026-107773 dokan-lite WordPress Medium Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.3.2 - Missing AuthorizationCVE-2026-119487 dokan-lite WordPress Medium Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.3.2 - Missing AuthorizationCVE-2026-119485 dokan-lite WordPress Medium Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.3.1 - Authenticated (Shop Manager+) PHP Object InjectionCVE-2026-115590 dokan-lite WordPress Medium Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via 'password' Parameter to /wp-json/dokan/v1/customers/{id}CVE-2026-89280 dokan-lite WordPress Medium Fix reported
Dokan <= 5.1.0 - Authenticated (Vendor+) Information ExposureCVE-2026-107694 dokan-lite WordPress Medium Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Authenticated (Shop Manager+) Remote Code ExecutionCVE-2026-16576 dokan-lite WordPress High Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Unauthenticated Information ExposureCVE-2026-16575 dokan-lite WordPress Medium Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Missing AuthorizationCVE-2026-16577 dokan-lite WordPress Medium Fix reported
Dokan <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Downloadable Product Access GrantCVE-2026-16574 dokan-lite WordPress Medium Fix reported
Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Product Attribute ModificationCVE-2026-16565 dokan-lite WordPress Medium Fix reported
Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Arbitrary Order Status ModificationCVE-2026-16564 dokan-lite WordPress Medium Fix reported
Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege EscalationCVE-2026-8761 dokan-lite WordPress High Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.10 - Missing AuthorizationCVE-2026-66699 dokan-lite WordPress Medium Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.6 - Unauthenticated Stored Cross-Site ScriptingCVE-2026-57706 dokan-lite WordPress High Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Custom+) Stored Cross-Site Scripting via Product SKUCVE-2026-11783 dokan-lite WordPress Medium Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Information Disclosure via 'id' ParameterCVE-2026-11987 dokan-lite WordPress Medium Fix reported
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification via Multiple AJAX HandlersCVE-2026-10023 dokan-lite WordPress Medium Fix reported