Approved changes feed: RSS · Atom

cpe:2.3:a:dokan,_inc.:dokan:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDokan, Inc. (8b1916ca-b760-5844-9f76-1243a06dcbc7)
ProductDokan (18b689f9-a011-5a7c-8f0f-b54a062675ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-66699 vulnerable 2026-09-16 04:32:55.013656 WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability
MEDIUM (5.3)
Custom role Broken Access Control in Dokan <= 5.0.10 versions.
Published: 2026-08-06T14:28:04.864Z
Updated: 2026-08-06T19:04:20.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-57706 vulnerable 2026-07-29 01:03:16.067266 WordPress Dokan plugin <= 5.0.6 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dokan, Inc. Dokan dokan-lite allows Reflected XSS.This issue affects Dokan: from n/a through <= 5.0.6.
Published: 2026-07-13T08:41:24.672Z
Updated: 2026-07-13T13:40:24.015Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-49780 vulnerable 2026-07-29 00:57:45.571464 WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability
HIGH (8.8)
Customer Privilege Escalation in Dokan <= 5.0.2 versions.
Published: 2026-06-15T20:19:28.889Z
Updated: 2026-06-16T01:17:36.373Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24359 vulnerable 2026-06-08 07:51:17.591020 WordPress Dokan plugin <= 4.2.4 - Broken Authentication vulnerability
HIGH (8.8)
Authentication Bypass Using an Alternate Path or Channel vulnerability in Dokan, Inc. Dokan dokan-lite allows Authentication Abuse.This issue affects Dokan: from n/a through <= 4.2.4.
Published: 2026-03-25T16:14:31.035Z
Updated: 2026-04-28T16:14:47.818Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53425 vulnerable 2026-06-08 07:31:14.522473 WordPress Dokan plugin <= 4.1.3 - Privilege Escalation vulnerability
HIGH (7.2)
Incorrect Privilege Assignment vulnerability in Dokan, Inc. Dokan dokan-lite allows Privilege Escalation.This issue affects Dokan: from n/a through <= 4.1.3.
Published: 2025-10-22T14:32:33.573Z
Updated: 2026-04-28T16:13:24.832Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.