Skip to contentDokan Pro vulnerabilities
- dokan proWordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerabilityCVE-2026-654957.5 High
- dokan proWordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerabilityCVE-2026-654947.1 High
- dokan proWordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerabilityCVE-2026-654937.5 High
- dokan pro, wedevs dokan pro +1 moreWordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-654927.1 High
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST EndpointCVE-2026-122248.8 High
- dokan proWordPress Dokan Pro plugin <= 5.0.4 - Privilege Escalation vulnerabilityCVE-2026-560339.8 Critical
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' ParametersCVE-2026-120777.5 High
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' ParameterCVE-2026-120796.5 Medium
- dokan proWordPress Dokan Pro plugin <= 3.14.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-394976.5 Medium
- dokan pro, wedevs dokan pro +1 moredokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information ExposureCVE-2025-128095.3 Medium
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege EscalationCVE-2025-59318.8 High
- dokan, dokan pro, wedevs dokan pro +2 moreDokan Pro <= 3.10.3 - Unauthenticated SQL InjectionCVE-2024-3922Public exploitEPSS 52.9%10.0 Critical