Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution 5.3.3 Clear all filters
TI-2026-85369 CVE-2026-107775 · GHSA-r87m-58wg-rrvv

Incorrect authorization in Dokan lets subsite admins enable outside sellers

Priority LOW 13

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not verify that the acting administrator is authorized to manage each selected user before enabling that user's market…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00168 Published 2026-11-05 Fixed in 5.3.3 CWE-863
TI-2026-85368 CVE-2026-107774 · GHSA-w533-wggf-5gxg

Dokan Marketplace: Unauthenticated Email Sender Spoofing via Contact Form

Priority LOW 29

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not use a trusted site-owned sender address when relaying its store contact form, instead placing the unauthenticated…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00182 Published 2026-11-05 Fixed in 5.3.3 CWE-290
TI-2026-85367 CVE-2026-107773 · GHSA-59gw-w7gg-prj6

Missing authorization in Dokan exposes order data and notes

Priority LOW 34

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly verify authorization when serving a single order and its order notes, allowing unauthenticated attackers…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00164 Published 2026-11-05 Fixed in 5.3.3 CWE-863