14 matches found
CVE-2026-119487
Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2...
EUVD-2026-116091
Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2...
EUVD-2026-116089
Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2...
CVE-2026-115590
Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Dokan: from n/a through 5.3.1...
CVE-2026-115590
The weDevs Dokan (dokan-lite) WordPress plugin, versions up to and including 5.3.1 , is vulnerable to a PHP Object Injection flaw caused by the deserialization of untrusted data . This vulnerability allows an attacker to achieve object injection, potentially leading to unauthorized actions or sys...
EUVD-2026-112117
Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Dokan: from n/a through 5.3.1...
CVE-2026-115590 WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Dokan: from n/a through 5.3.1...
CVE-2026-115590: weDevs Dokan: Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects…
Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Dokan: from n/a through 5.3.1...
PT-2026-128254
Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Dokan: from n/a through 5.3.1...
EUVD-2023-30322
Malicious code in bioql PyPI...
CVE-2023-26525
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy.This issue affects Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own...
CVE-2023-26525
CVE-2023-26525 concerns the WordPress Dokan plugin (Best WooCommerce Multivendor Marketplace) with an SQL Injection vulnerability in versions up to and including 3.7.12. The underlying issue is improper neutralization of input in SQL commands, exploitable by an authenticated attacker with vendor ...
PT-2023-20701
Name of the Vulnerable Software and Affected Versions weDevs Dokan – Best WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy versions n/a through 3.7.12 Description The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also...
CVE-2023-34382
The Dokan WordPress plugin (Dokan – Best WooCommerce Multivendor Marketplace Solution) is affected up to version 3.7.19. The issue is a PHP Object Injection due to insecure deserialization of untrusted data in the plugin’s codebase. This vulnerability can impact confidentiality, integrity, and av...