Unknown Dokan: AI Powered WooCommerce Multivendor Marketplace Solution

• CVE-2026-107775 Unrated Dokan < 5.3.3 - Admin+ Cross-Site Vendor Activation 0.1%
• CVE-2026-107774 Unrated Dokan < 5.3.3 - Unauthenticated Email Sender Spoofing via Store Contact Form 0.1%
• CVE-2026-107773 Unrated Dokan < 5.3.3 - Unauthenticated Order PII Disclosure and Note Manipulation via Orders REST Endpoint 0.1%
• CVE-2026-107694 Low 2.7 Dokan < 5.2.0 - Vendor+ Cross-Vendor Commission Settings Disclosure via Commission REST Endpoint 0.2%
• CVE-2026-16577 Low 2.7 Dokan < 5.0.14 - Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied Amount 0.3%
• CVE-2026-16576 High 7.2 Dokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST API 0.5%
• CVE-2026-16575 Medium 5.3 Dokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint 0.3%
• CVE-2026-16574 Medium 5.4 Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint 0.2%
• CVE-2026-16565 Medium 4.3 Dokan < 5.0.9 - Vendor+ Cross-Vendor Product Attribute Modification via Product Attribute REST API 0.3%
• CVE-2026-16564 Medium 4.3 Dokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint 0.3%