Plugin icon

Dokan Pro

dokan-pro

Vulnerabilities:

8

Last Updated:

n/a

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2026-06-30
Title
Dokan Pro < 5.0.5 - Vendor+ Privilege Escalation via update_capabilities REST Endpoint
Fixed in
Fixed in 5.0.5
CVSS
8.8 (high)
Published
2026-06-24
Title
Dokan Pro < 5.0.5 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters
Fixed in
Fixed in 5.0.5
CVSS
7.5 (high)
Published
2026-06-24
Title
Dokan Pro < 5.0.5 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
Fixed in
Fixed in 5.0.5
CVSS
6.5 (medium)
Published
2026-06-23
Title
Dokan Pro < 5.0.5 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 5.0.5
CVSS
9.8 (critical)
Published
2025-12-15
Title
dokan pro < 4.2.0 - Missing Authorization to Unauthenticated Sensitive Information Exposure
Fixed in
Fixed in 4.2.0
CVSS
5.3 (medium)
Published
2025-08-25
Title
Dokan Pro < 4.0.6 - Authenticated (Vendor+) Privilege Escalation
Fixed in
Fixed in 4.0.6
CVSS
8.8 (high)
Published
2025-05-16
Title
Dokan Pro <= 3.14.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
No known fix
CVSS
5.5 (medium)
Published
2024-06-11
Title
Dokan Pro < 3.11.0 - Unauthenticated SQL Injection
Fixed in
Fixed in 3.11.0
CVSS
10 (critical)