What’s Vulnerable › Products
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Latest Dokan: AI Powered WooCommerce Multivendor Marketplace Solution vulnerabilities
- CVE-2026-107694 — Dokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST Endpoint (CVSS 2.7)
- CVE-2026-16577 — Dokan < 5.0.14 - Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied Amount (CVSS 2.7)
- CVE-2026-16576 — Dokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST API (CVSS 7.2)
- CVE-2026-16575 — Dokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint (CVSS 5.3)
- CVE-2026-16574 — Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint (CVSS 5.4)
- CVE-2026-16565 — Dokan < 5.0.9 - Vendor+ Cross-Vendor Product Attribute Modification via Product Attribute REST API (CVSS 4.3)
- CVE-2026-16564 — Dokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint (CVSS 4.3)