CVE-2026-16565 Dokan < 5.0.9 - Vendor+ Cross-Vendor Product Attribute Modification via Product Attribute REST API

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does not verify product ownership on its product-attribute REST write endpoints, allowing users with a Dokan vendor account to modify the product attributes and default attributes of any other vendor'...

PT-2013-3606

Name of the Vulnerable Software and Affected Versions PHP Radius extension versions prior to 1.2.7 Description The issue is related to a buffer overflow in the radius get vendor attr function, which can be exploited by remote attackers to cause a denial of service crash and potentially execute...