Skip to content

Known vulnerabilities in wedevs Dokan Pro

Is your version affected?

CVE Summary Score Published
CVE-2026-65492 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Dokan Pro… 7.1 High Jul 23, 2026
CVE-2026-12224 The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via update_capabilities REST Endpoint in all… 8.8 High Jul 1, 2026
CVE-2026-12077 The Dokan Pro plugin for WordPress is vulnerable to time-based SQL Injection via the via 'latitude' and 'longitude'… 7.5 High Jun 25, 2026
CVE-2026-12079 The Dokan Pro plugin for WordPress is vulnerable to time-based SQL Injection via the ’orderby’ parameter in all versions… 6.5 Medium Jun 25, 2026
CVE-2025-12809 The Dokan Pro plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the… 5.3 Medium Dec 16, 2025
CVE-2025-5931 The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and… 8.8 High Aug 26, 2025
CVE-2024-3922 The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and… 10.0 Critical Jun 13, 2024

Other wedevs products