CyberSecBulletin

Dokaninc vulnerabilities

We track 2 vulnerabilities in Dokaninc products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 5, 2026.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest Dokaninc vulnerabilities

  • 8.8 High severity

    Dokan: AI Powered WooCommerce Multivendor…: Missing Authorization

    CVE-2026-8761Dokaninc

    The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the `CustomersController` REST controller (`includes/REST/CustomersController.php`), which re-regi

  • 8.1 High severity

    Dokan: AI Powered WooCommerce Multivendor…: Improper Access Control

    CVE-2025-14977Dokaninc

    The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.2.4 via the `/wp-json/dokan/v1/settings` REST API