CVE-2026-16564

The CVE-2026-16564 entry concerns the Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin prior to version 5.0.9. The issue is that a REST endpoint used for bulk order-status changes does not verify order ownership, allowing a Dokan vendor account to modify the status ...