Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: dokaninc Clear all filters
TI-2026-75154 CVE-2026-89280 · GHSA-ff3p-97v2-hvmp

Dokan WooCommerce Marketplace: IDOR enables account takeover via password

Priority LOW 19

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.2.1 vi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00213 Published 2026-10-16 No fix listed CWE-639
TI-2026-10170 CVE-2026-11783 · GHSA-wv47-9f7r-v6pj

Cross-site scripting in dokaninc Dokan: AI Powered WooCommerce Multivendor Marketplace…

Priority LOW 29

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Product SKU in all versions up to, and includin…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00383 Published 2026-06-27 No fix listed CWE-79
TI-2026-10330 CVE-2026-11987 · GHSA-7w4v-h7g8-xr5r

Authorization bypass in dokaninc Dokan: AI Powered WooCommerce Multivendor Marketplace…

Priority LOW 20

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.0.4 vi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00471 Published 2026-06-27 No fix listed CWE-639
TI-2026-08784 CVE-2026-10023 · GHSA-ghfc-6wf7-mhgw

Authorization bypass in dokaninc Dokan: AI Powered WooCommerce Multivendor Marketplace…

Priority LOW 20

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.0.3 vi…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00243 Published 2026-06-18 No fix listed CWE-639
TI-2025-13661 CVE-2025-14977 · GHSA-9fx4-284h-m253

Improper access control in dokaninc Dokan: AI Powered WooCommerce Multivendor Marketplace…

Priority LOW 37

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 4.2.4 via th…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00308 Published 2026-01-20 No fix listed CWE-284