Skip to content
OpenAdvisories

Vendor

Dokan

9 known vulnerabilities.

6 results · Clear filters · Feed

  • High 7.1

    WordPress Dokan Pro plugin <= 5.0.2 - SQL Injection vulnerability

    Subscriber SQL Injection in Dokan Pro <= 5.0.2 versions.

  • High 7.5

    WordPress Dokan Pro plugin <= 5.0.2 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in Dokan Pro <= 5.0.2 versions.

  • High 7.1

    WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan dokan-lite allows Reflected XSS.This issue affects Dokan: from n/a through <= 5.0.6.

  • High 8.8

    WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability

    Customer Privilege Escalation in Dokan <= 5.0.2 versions.

  • High 8.8

    WordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability

    Authentication Bypass Using an Alternate Path or Channel vulnerability in Dokan, Inc. Dokan dokan-lite allows Authentication Abuse.This issue affects Dokan: from n/a through <= 4.2.4.

  • High 7.2

    WordPress Dokan plugin <= 4.1.3 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Dokan, Inc. Dokan dokan-lite allows Privilege Escalation.This issue affects Dokan: from n/a through <= 4.1.3.