DP
Product
Dokan Pro
7
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 2Low 0
Watch
Add Dokan Pro to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-3922 | 9.8 | Jun 13 | Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection Affected: through 3.10.3 |
| CVE-2026-12224 | 8.8 | Jul 1 | Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpoint Affected: through 5.0.4 |
| CVE-2025-5931 | 8.8 | Aug 26 | Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation Affected: through 4.0.5 |
| CVE-2026-12077 | 7.5 | Jun 25 | Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters Affected: through 5.0.4 |
| CVE-2026-65492 | 7.1 | Jul 23 | WordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerability Affected: before 5.0.7 |
| CVE-2026-12079 | 6.5 | Jun 25 | Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter Affected: through 5.0.4 |
| CVE-2025-12809 | 5.3 | Dec 16 | dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure Affected: through 4.1.3 |
Showing 7