112 matches found
CVE-2024-3922-Poc
CVE-2024-3922-Poc Dokan Pro Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 Origin: http://192.168.110.184:8080 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36 KHTML, like Gecko Chrome/126.0.0.0 Safari/537.36 Accept:...
Dokan Pro <= 3.10.3 - SQL Injection
The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. id: CVE-2024-3922 info: name: Dokan Pro...
CVE-2026-65492
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Dokan Pro allows Reflected XSS. This issue affects Dokan Pro: from n/a before 5.0.7...
CVE-2026-65495
Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...
CVE-2026-65493
Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65494
Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65495 WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...
CVE-2026-65495
The CVE-2026-65495 entry describes an unauthenticated Broken Access Control vulnerability in the WordPress Dokan Pro plugin versions
CVE-2026-65495
Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...
CVE-2026-65495 WordPress Dokan Pro plugin <= 5.0.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...
EUVD-2026-48106
Unauthenticated Broken Access Control in Dokan Pro = 5.0.3 versions...
CVE-2026-65494
Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...
EUVD-2026-48105
Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65494 WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerability
Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65494
CVE-2026-65494 affects WordPress via the Dokan Pro plugin ≤ 5.0.2, with a Subscriber SQL Injection vulnerability. The connected data confirms the affected component and the vulnerability class (SQL injection) but does not provide exploit details, affected tables/parameters, or a patch/version to ...
CVE-2026-65494 WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerability
Subscriber SQL Injection in Dokan Pro = 5.0.2 versions...
CVE-2026-65492 WordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in weDevs Dokan Pro allows Reflected XSS. This issue affects Dokan Pro: from n/a before 5.0.7...
CVE-2026-65493 WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability
Subscriber PHP Object Injection in Dokan Pro = 5.0.2 versions...