Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:dokan:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Dokan (34c521da-c093-581f-9868-9e550e1e75e5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-3915 |
vulnerable | 2026-06-08 05:48:22.600673 |
Dokan < 3.7.6 - Unauthenticated SQLi
The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users
Published: 2022-12-12T17:54:43.952Z
Updated: 2025-04-22T14:58:27.755Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-3194 |
vulnerable | 2026-06-08 05:47:19.698219 |
Dokan < 3.6.4 - Vendor Stored Cross-Site Scripting
The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allow them to run stored XSS attacks against other users like site administrators.
Published: 2024-01-16T15:53:36.500Z
Updated: 2025-06-02T15:10:22.999Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.