Dokan Dokan vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Dokan Dokan: 5 record(s), with affected versions and fixes.

CVE-2026-66699 Medium · 5.3 CWE-862 Aug 6, 2026

WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability

Custom role Broken Access Control in Dokan <= 5.0.10 versions.

CVE-2026-57706 High · 7.1 CWE-79 Jul 13, 2026

WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan dokan-lite allows Reflected XSS.This issue affects Dokan: from n/a through <= 5.0.6.

CVE-2026-49780 High · 8.8 CWE-266 Jun 15, 2026

WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability

Customer Privilege Escalation in Dokan <= 5.0.2 versions.

CVE-2026-24359 High · 8.8 CWE-288 Mar 25, 2026

WordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Dokan, Inc. Dokan dokan-lite allows Authentication Abuse.This issue affects Dokan: from n/a through <= 4.2.4.

CVE-2025-53425 High · 7.2 CWE-266 Oct 22, 2025

WordPress Dokan plugin <= 4.1.3 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Dokan, Inc. Dokan dokan-lite allows Privilege Escalation.This issue affects Dokan: from n/a through <= 4.1.3.