CVE-2026-16565

Dokan: AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress (pre-5.0.9) does not verify product ownership on its product-attribute REST write endpoints. This allows a Dokan vendor account to modify the product attributes and default attributes of other vendors’ products in...