Description
Deserialization of Untrusted Data vulnerability in weDevs Dokan dokan-lite allows Object Injection.This issue affects Dokan: from n/a through 5.3.1.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| weDevs | Dokan | ≤ 5.3.1 | — |
High · 7.2
CVE-2026-115590
EUVD-2026-112117GHSA-qrxq-h8xh-fq8j
WordPress Dokan plugin <= 5.3.1 - PHP Object Injection vulnerability
Published Oct 28, 2026 · Updated Oct 29, 2026 · Assigned by Patchstack