CVE-2026-8761 Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalation

The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the CustomersController REST controller includes/REST/CustomersController.php, which re-registers WooCommerce's customer CRUD routes...

PT-2026-67965

Name of the Vulnerable Software and Affected Versions Dokan versions prior to 5.0.2 Description A privilege escalation issue exists due to a missing authorization check in the CustomersController REST controller located in includes/REST/CustomersController.php. The plugin re-registers WooCommerce...