Skip to contentUnknown Dokan: Ai Powered Woocommerce Multivendor Marketplace Solution vulnerabilities
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.3.3 - Admin+ Cross-Site Vendor ActivationCVE-2026-1077752.7 Low
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.3.3 - Unauthenticated Email Sender Spoofing via Store Contact FormCVE-2026-1077745.3 Medium
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.3.3 - Unauthenticated Order PII Disclosure and Note Manipulation via Orders REST EndpointCVE-2026-1077736.5 Medium
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST EndpointCVE-2026-1076942.7 Low
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.14 - Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied AmountCVE-2026-165772.7 Low
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST APICVE-2026-165767.2 High
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST EndpointCVE-2026-165755.3 Medium
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST EndpointCVE-2026-165745.4 Medium
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.9 - Vendor+ Cross-Vendor Product Attribute Modification via Product Attribute REST APICVE-2026-165654.3 Medium
- unknown dokan: ai powered woocommerce multivendor marketplace solutionDokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST EndpointCVE-2026-165644.3 Medium