Skip to content
OpenAdvisories

Vendor

Dokan

9 known vulnerabilities.

Products

Dokan 5 Dokan Pro 3 Open Source File System 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-66699

    WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability

    Custom role Broken Access Control in Dokan <= 5.0.10 versions.

    Dokan Dokan
  • Medium 6.5
    CVE-2025-39497

    WordPress Dokan Pro plugin <= 3.14.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan Dokan Pro allows Stored XSS.This issue affects Dokan Pro: from n/a through 3.14.5.

    Dokan Dokan Pro