Vulnerabilidades de Dokan
CVEs publicadas que afetam produtos de Dokan: 5 registro(s), com severidade, exploração e correções.
CVE-2026-57706
Alta · 7.1
CWE-79 13/07/2026
WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan dokan-lite allows Reflected XSS.This issue affects Dokan: from n/a through <= 5.0.6.
CVE-2026-49780
Alta · 8.8
CWE-266 15/06/2026
WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability
Customer Privilege Escalation in Dokan <= 5.0.2 versions.
CVE-2026-24359
Alta · 8.8
CWE-288 25/03/2026
WordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in Dokan, Inc. Dokan dokan-lite allows Authentication Abuse.This issue affects Dokan: from n/a through <= 4.2.4.
CVE-2025-39497
Média · 6.5
CWE-79 05/01/2026
WordPress Dokan Pro plugin <= 3.14.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan Dokan Pro allows Stored XSS.This issue affects Dokan Pro: from n/a through 3.14.5.
CVE-2025-53425
Alta · 7.2
CWE-266 22/10/2025
WordPress Dokan plugin <= 4.1.3 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Dokan, Inc. Dokan dokan-lite allows Privilege Escalation.This issue affects Dokan: from n/a through <= 4.1.3.