WeDevs Dokan Pro

• CVE-2026-65492 High 7.1 WordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2026-12224 High 8.8 Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpoint 0.4%
• CVE-2026-12077 High 7.5 Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters 0.5%
• CVE-2026-12079 Medium 6.5 Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter 0.4%
• CVE-2025-12809 Medium 5.3 dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure 0.2%
• CVE-2025-5931 High 8.8 Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation 0.5%
• CVE-2024-3922 Critical 10.0 Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection 52.9%