| CVE-2026-107775 |
Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation
|
2.7
Low
|
Nov 5, 2026 |
| CVE-2026-107773 |
Dokan < 5.3.3 - Unauthenticated Order PII Disclosure and Note Manipulation via Orders REST Endpoint
|
6.5
Medium
|
Nov 5, 2026 |
| CVE-2026-107774 |
Dokan < 5.3.3 - Unauthenticated Email Sender Spoofing via Store Contact Form
|
5.3
Medium
|
Nov 5, 2026 |
| CVE-2026-107694 |
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that…
|
2.7
Low
|
Oct 11, 2026 |
| CVE-2026-16575 |
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not restrict…
|
5.3
Medium
|
Aug 21, 2026 |
| CVE-2026-16576 |
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly…
|
7.2
High
|
Aug 21, 2026 |
| CVE-2026-16577 |
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a…
|
2.7
Low
|
Aug 21, 2026 |
| CVE-2026-16574 |
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify…
|
5.4
Medium
|
Aug 8, 2026 |
| CVE-2026-16564 |
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify…
|
4.3
Medium
|
Aug 3, 2026 |
| CVE-2026-16565 |
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify…
|
4.3
Medium
|
Aug 3, 2026 |