Skip to content
Dokaninc vulnerabilities
Newest
-
dokaninc dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via 'password' Parameter to /wp-json/doka…
CVE-2026-89280
4.3 Medium
-
dokaninc dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy
Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalation
CVE-2026-8761
8.8 High
-
dokaninc dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Custom+) Stored Cross-Site Scripting via Product SKU
CVE-2026-11783
6.4 Medium
-
dokaninc dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Information Disclosure via 'id' Parameter
CVE-2026-11987
4.3 Medium
-
dokaninc dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification via Multiple AJAX Handlers
CVE-2026-10023
4.3 Medium
-
dokaninc dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint
CVE-2026-3504
5.3 Medium
-
dokaninc dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disc…
CVE-2025-14977
8.1 High
-
dokan, dokaninc dokan: ai powered woocommerce multivendor marketplace solution – build your own amazon, ebay, etsy +1 more
Dokan <= 3.0.8 - Cross-Site Request Forgery Bypass
CVE-2020-36748
4.3 Medium