Skip to content
Sign in
9.8 Critical

CVE-2022-3915 The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL…

Description

The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

Affected products and versions

Product Affected versions Fixed in
Dokan 2.6 2.6.8 → < 3.7.6 3.7.6

Other CVEs of Dokan

The 3 CVEs of Dokan →
CVE-2026-107776 Dokan < 5.3.3 - Vendor+ Reverse Withdrawal Ledger Credit Without Payment via Discount Coupon 2.2 Low CVE-2022-3194 The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may… 5.4 Medium
Track this CVE