CVE-2025-5931

creationtimestamp| type| source ---|---|--- 2025-08-26 06:18:11+00:00| seen| Telegram/5mOGL9UO2jxNUdKM36z3OTQcd4qNv0mIliSHy8PBlZfE...

CVE-2025-5931 Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation

The Dokan Pro plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.5. This is due to the plugin not properly validating a user's identity prior to updating their password during a staff password reset. This makes it possible for...