Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy

Уязвимости

• CVE-2026-8761

  Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalation

  Высокий 8.8

• CVE-2026-49780

  WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability

  Высокий 8.8

• CVE-2026-24359

  WordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability

  Высокий 8.8

• CVE-2023-34382

  WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection

  Высокий 8.8

• CVE-2025-14977

  Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Insecure Direct Object Reference to PayPal Account

  Высокий 8.1

• CVE-2023-26525

  WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection

  Высокий 8.1

• CVE-2025-53425

  WordPress Dokan plugin <= 4.1.3 - Privilege Escalation vulnerability

  Высокий 7.2

• CVE-2026-57706

  WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2026-11783

  Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Custom+) Stored Cross-Site Scripting via Product SKU

  Средний 6.4

• CVE-2026-66699

  WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability

  Средний 5.3

• CVE-2026-3504

  Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint

  Средний 5.3

• CVE-2026-11987

  Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Information Disclosure

  Средний 4.3

• CVE-2026-10023

  Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modificati

  Средний 4.3

• CVE-2020-36748→ 3.0.9

  Dokan <= 3.0.8 - Cross-Site Request Forgery Bypass

  Средний 4.3