Login Request a demo
DO
Product
Dokan
by Dokan · last CVE Jun 13, 2024
6
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 2Medium 2Low 0
Severity
All severities6Critical2High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Dokan to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-3922
9.8
53%
Jun 13
Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection
Affected: before 3.11.0
CVE-2022-3915
9.8
1%
Dec 12
The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by…
Affected: before 3.7.6
CVE-2023-34382
8.8
1%
Dec 19
WordPress Dokan Plugin <= 3.7.19 is vulnerable to PHP Object Injection
Affected: before 3.7.20
CVE-2023-26525
8.1
1%
Dec 20
WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection
Affected: before 3.7.13
CVE-2022-3194
5.4
0%
Jan 16
Dokan < 3.6.4 - Vendor Stored Cross-Site Scripting
Affected: before 3.6.4
CVE-2020-36748
4.3
0%
Jul 1
The Dokan plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.0.8
Affected: before 3.0.9
Showing 6