Advisories · Technology
Dokan.
Every CVE that names Dokan among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 2.2 Low
Dokan < 5.3.3 - Vendor+ Reverse Withdrawal Ledger Credit Without Payment via Discount Coupon
- Dokan
- CVSS 5.3 Medium
WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability
- Dokan
- Broken access control
- CVSS 7.1 High
WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability
- Dokan
- Cross-site scripting (XSS)
- CVSS 8.8 High
WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability
- Dokan
- Privilege escalation
- CVSS 8.8 High
WordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability
- Dokan
- Authentication bypass
- CVSS 7.2 High
WordPress Dokan plugin <= 4.1.3 - Privilege Escalation vulnerability
- Dokan
- Privilege escalation
- CVSS 5.4 Medium
Dokan < 3.6.4 - Vendor Stored Cross-Site Scripting
- Dokan
- CVSS 9.8 CriticalCritical · CVSS 9+
Dokan < 3.7.6 - Unauthenticated SQLi
- Dokan