Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/08/05 4:25 a.m.47 views

CVE-2026-8761 Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalation

The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the CustomersController REST controller includes/REST/CustomersController.php, which re-registers WooCommerce's customer CRUD routes...

8.8CVSS0.00358EPSS
SaveExploits0References10
Rows per page
Query Builder