Skip to contentWedevs Dokan Pro vulnerabilities
- dokan pro, wedevs dokan pro +1 moreWordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-654927.1 High
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST EndpointCVE-2026-122248.8 High
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' ParametersCVE-2026-120777.5 High
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' ParameterCVE-2026-120796.5 Medium
- dokan pro, wedevs dokan pro +1 moredokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information ExposureCVE-2025-128095.3 Medium
- dokan pro, wedevs dokan pro +1 moreDokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege EscalationCVE-2025-59318.8 High
- dokan, dokan pro, wedevs dokan pro +2 moreDokan Pro <= 3.10.3 - Unauthenticated SQL InjectionCVE-2024-3922Public exploitEPSS 52.9%10.0 Critical