Unknown Dokan vulnerabilities

• dokan, inc. dokan Dokan < 5.3.3 - Vendor+ Reverse Withdrawal Ledger Credit Without Payment via Discount Coupon CVE-2026-107776 2.2 LowNovember 5, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation CVE-2026-107775 2.7 LowNovember 5, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.3.3 - Unauthenticated Email Sender Spoofing via Store Contact Form CVE-2026-107774 5.3 MediumNovember 5, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.3.3 - Unauthenticated Order PII Disclosure and Note Manipulation via Orders REST Endpoint CVE-2026-107773 6.5 MediumNovember 5, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST Endpoint CVE-2026-107694 2.7 LowOctober 11, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.0.14 - Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied Amount CVE-2026-16577 2.7 LowAugust 21, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST API CVE-2026-16576 7.2 HighAugust 21, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint CVE-2026-16575 5.3 MediumAugust 21, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint CVE-2026-16574 5.4 MediumAugust 8, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.0.9 - Vendor+ Cross-Vendor Product Attribute Modification via Product Attribute REST API CVE-2026-16565 4.3 MediumAugust 3, 2026
• unknown dokan: ai powered woocommerce multivendor marketplace solution Dokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint CVE-2026-16564 4.3 MediumAugust 3, 2026
• dokan Dokan < 3.6.4 - Vendor Stored Cross-Site Scripting CVE-2022-3194 5.4 MediumJanuary 16, 2024
• dokan Dokan < 3.7.6 - Unauthenticated SQLi CVE-2022-3915 9.8 CriticalDecember 12, 2022