7.2
Élevée
CVE-2026-16576 The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly…
Description
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin REST API routes, checking only for a WooCommerce management capability instead of the Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14-installation capability, allowing users such as Shop Managers to install and activate arbitrary Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 from WordPress.org.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Dokan: AI Powered WooCommerce Multivendor Marketplace Solution 5.0 | premières → < 5.0.14 | 5.0.14 |
Autres CVE de Dokan: AI Powered WooCommerce Multivendor Marketplace Solution
Les 10 CVE de Dokan: AI Powered WooCommerce Multivendor Marketplace Solution →
CVE-2026-107774
Dokan < 5.3.3 - Unauthenticated Email Sender Spoofing via Store Contact Form
5.3
Moyenne
CVE-2026-107773
Dokan < 5.3.3 - Unauthenticated Order PII Disclosure and Note Manipulation via Orders REST Endpoint
6.5
Moyenne
CVE-2026-107775
Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation
2.7
Faible
CVE-2026-107694
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that…
2.7
Faible