Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

Dokan Pro — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in Dokan Pro, with AI-generated Chinese analysis, references, and POCs.

Vendor: wedevs

CVE IDTitleCVSSSeverityPublished
CVE-2026-65495 WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability CWE-862 7.5 High2026-07-23
CVE-2026-65494 WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerability CWE-89 7.1 High2026-07-23
CVE-2026-65493 WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability CWE-502 7.5 High2026-07-23
CVE-2026-65492 WordPress Dokan Pro plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-07-23
CVE-2026-12224 Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpoint CWE-269 8.8 High2026-07-01
CVE-2026-56033 WordPress Dokan Pro plugin <= 5.0.4 - Privilege Escalation vulnerability CWE-266 9.8 Critical2026-06-26
CVE-2026-12079 Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter CWE-89 6.5 Medium2026-06-25
CVE-2026-12077 Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters CWE-89 7.5 High2026-06-25
CVE-2025-39497 WordPress Dokan Pro plugin <= 3.14.5 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2026-01-05
CVE-2025-12809 dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure CWE-862 5.3 Medium2025-12-16
CVE-2025-5931 Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation CWE-269 8.8 High2025-08-26
CVE-2024-3922 Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection CWE-89 10.0 Critical2024-06-13

All 12 known CVE vulnerabilities affecting Dokan Pro with full Chinese analysis, references, and POCs where available.