CVE-2026-16577

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin, in versions before 5.0.14 , contains a vulnerability where it fails to validate client-supplied payment amounts against a vendor's actual outstanding balance during reverse-withdrawal payments . This flaw allows ...

PT-2026-79303

Name of the Vulnerable Software and Affected Versions Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin versions prior to 5.0.14 Description The plugin fails to validate a client-supplied payment amount against the vendor's actual outstanding balance during the...

CVE-2026-16577: Incorrect Authorization

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vendor's actual outstanding balance when recording a reverse-withdrawal payment, allowing a vendor to credit their reverse-withdrawal...