<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: dokaninc-dokan-ai-powered-woocommerce-multivendor-marketplace-solution-build-you</title><description>Every new CVE for dokaninc-dokan-ai-powered-woocommerce-multivendor-marketplace-solution-build-you.</description><link>https://agentprime.io/</link><item><title>CVE-2026-89280: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution &lt;= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via &apos;password&apos; Parameter to /wp-json/dok…</title><link>https://agentprime.io/advisories/CVE-2026-89280/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-89280/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Oct 2026 03:38:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-8761: Dokan &lt;= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalation</title><link>https://agentprime.io/advisories/CVE-2026-8761/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-8761/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 05 Aug 2026 04:25:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-11783: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution &lt;= 5.0.4 - Authenticated (Custom+) Stored Cross-Site Scripting via Product SKU</title><link>https://agentprime.io/advisories/CVE-2026-11783/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11783/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 27 Jun 2026 06:50:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-11987: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution &lt;= 5.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Information Disclosure via &apos;id&apos; Parameter</title><link>https://agentprime.io/advisories/CVE-2026-11987/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-11987/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 27 Jun 2026 06:50:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-10023: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution &lt;= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification via Multiple AJAX Handlers</title><link>https://agentprime.io/advisories/CVE-2026-10023/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-10023/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 18 Jun 2026 03:41:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-3504: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution &lt;= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint</title><link>https://agentprime.io/advisories/CVE-2026-3504/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-3504/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 02 May 2026 13:26:09 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-14977: Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy &lt;= 4.2.4 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Dis…</title><link>https://agentprime.io/advisories/CVE-2025-14977/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-14977/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Jan 2026 04:35:45 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-36748: Dokan &lt;= 3.0.8 - Cross-Site Request Forgery Bypass</title><link>https://agentprime.io/advisories/CVE-2020-36748/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-36748/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 01 Jul 2023 05:33:28 GMT</pubDate><category>CVE</category></item></channel></rss>