CVE-2026-107773

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin, in versions prior to 5.3.3 , contains an authorization vulnerability. The plugin fails to correctly verify permissions when serving single orders and their associated notes. This allows unauthenticated attackers ...