Dokan vulnerabilities

Products

• Pro 12
• Dokan 6

Newest

• dokan pro WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability CVE-2026-65495 7.5 HighJuly 23, 2026
• dokan pro WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerability CVE-2026-65494 7.1 HighJuly 23, 2026
• dokan pro WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability CVE-2026-65493 7.5 HighJuly 23, 2026
• dokan pro, wedevs dokan pro +1 more WordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-65492 7.1 HighJuly 23, 2026
• dokan pro, wedevs dokan pro +1 more Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpoint CVE-2026-12224 8.8 HighJuly 1, 2026
• dokan pro WordPress Dokan Pro plugin <= 5.0.4 - Privilege Escalation vulnerability CVE-2026-56033 9.8 CriticalJune 26, 2026
• dokan pro, wedevs dokan pro +1 more Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters CVE-2026-12077 7.5 HighJune 25, 2026
• dokan pro, wedevs dokan pro +1 more Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter CVE-2026-12079 6.5 MediumJune 25, 2026
• dokan pro WordPress Dokan Pro plugin <= 3.14.5 - Cross Site Scripting (XSS) vulnerability CVE-2025-39497 6.5 MediumJanuary 5, 2026
• dokan pro, wedevs dokan pro +1 more dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure CVE-2025-12809 5.3 MediumDecember 16, 2025
• dokan pro, wedevs dokan pro +1 more Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation CVE-2025-5931 8.8 HighAugust 26, 2025
• dokan, dokan pro, wedevs dokan pro +2 more Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection CVE-2024-3922 Public exploit EPSS 52.9% 10.0 CriticalJune 13, 2024
• dokan Dokan < 3.6.4 - Vendor Stored Cross-Site Scripting CVE-2022-3194 5.4 MediumJanuary 16, 2024
• dokan, wedevs dokan – best woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy +1 more WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection CVE-2023-26525 7.1 HighDecember 20, 2023
• dokan, wedevs dokan – best woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy +1 more WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection CVE-2023-34382 4.4 MediumDecember 19, 2023
• dokan, dokaninc dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy +1 more Dokan <= 3.0.8 - Cross-Site Request Forgery Bypass CVE-2020-36748 4.3 MediumJuly 1, 2023
• dokan Dokan < 3.7.6 - Unauthenticated SQLi CVE-2022-3915 9.8 CriticalDecember 12, 2022
• dokan open source file system, dokan-dev dokany +1 more Dokan file system driver contains a stack-based buffer overflow CVE-2018-5410 Public exploit 7.8 HighJanuary 7, 2019