Dokan
Dokan, Inc.
Developer
5.0.17
Latest version
30,000
Installations
No date
Last updated
Vulnerability history
0 present
21 patched
10 Mitigation rules
- Shop Manager+ Arbitrary Plugin Installation/Activation via REST API vulnerability< 5.0.142 days ago
- Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint vulnerability< 5.0.114 days ago
- Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint vulnerability< 5.0.94 days ago
- Vendor+ Cross-Vendor Product Attribute Modification via Product Attribute REST API vulnerability< 5.0.94 days ago
- Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied Amount vulnerability< 5.0.146 days ago
- Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint vulnerability< 5.0.146 days ago
- Privilege Escalation vulnerability<= 5.0.205/08/2026
- Broken Access Control vulnerability<= 5.0.1029/07/2026
- Cross Site Scripting (XSS) vulnerability<= 5.0.610/07/2026
- Authenticated (Custom+) Stored Cross-Site Scripting vulnerability<= 5.0.430/06/2026
- Authenticated (Subscriber+) Insecure Direct Object Reference to Information Disclosure vulnerability<= 5.0.426/06/2026
- Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification vulnerability<= 5.0.317/06/2026
- Privilege Escalation vulnerability<= 5.0.203/06/2026
- Unauthenticated Information Disclosure in Store Reviews REST API Endpoint vulnerability<= 4.3.101/05/2026
- Broken Authentication vulnerability<= 4.2.416/03/2026
- Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure vulnerability<= 4.2.420/01/2026
- Privilege Escalation vulnerability<= 4.1.320/09/2025
- PHP Object Injection vulnerability<= 3.7.1919/06/2023
- Authenticated SQL Injection vulnerability<= 3.7.1202/03/2023
- Cross-Site Request Forgery (CSRF) vulnerability<= 3.2.001/03/2021
- Cross-Site Request Forgery (CSRF) vulnerability<= 3.0.816/09/2020