WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy

Transform your WooCommerce site into a multivendor marketplace with Dokan – an AI powered & advanced WooCommerce marketplace solution

22Reported vulnerabilities
9.8Highest CVSS score
5.0.14Latest version
30,000+Active installs

What to do now

Update Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy to 5.0.14 or later. 22 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-3915 Critical 9.8 1.1% 2.6.8 up to (but not including) 3.7.6 3.7.6 December 12, 2022
CVE-2022-3194 Medium 5.4 0.5% 0 up to (but not including) 3.6.4 3.6.4 January 16, 2024
CVE-2026-8761 High 8.8 0.4% 5.0.2 and earlier 5.0.3 August 5, 2026
CVE-2026-49780 High 8.8 0.3% 5.0.2 and earlier 5.0.3 June 3, 2026
CVE-2020-36748 Medium 4.3 0.5% 0 up to (but not including) 3.0.9 3.0.9 July 1, 2023
CVE-2025-14977 High 8.1 0.3% 0 to 4.2.4 (inclusive) 4.2.5 January 20, 2026
CVE-2026-16576 High 7.2 0.3% Before 5.0.14 5.0.14 August 28, 2026
CVE-2026-57706 High 7.2 0.3% 5.0.6 and earlier 5.0.7 July 10, 2026
CVE-2025-53425 High 7.2 0.4% 4.1.3 and earlier 4.1.4 September 20, 2025
CVE-2023-26525 High 7.2 0.6% 3.7.12 and earlier 3.7.13 March 2, 2023
CVE-2023-34382 Medium 6.6 0.7% Before 3.7.20 3.7.20 June 7, 2023
CVE-2026-11783 Medium 6.4 0.4% 0 to 5.0.4 (inclusive) 5.0.5 June 27, 2026
CVE-2026-16575 Medium 5.3 0.2% Before 5.0.14 5.0.14 August 24, 2026
CVE-2026-3504 Medium 5.3 0.3% 0 to 4.3.1 (inclusive) 4.3.2 May 2, 2026
CVE-2026-24359 Medium 4.3 0.5% 4.2.4 and earlier 4.2.5 March 16, 2026
CVE-2026-16577 Medium 4.3 0.2% Before 5.0.14 5.0.14 August 24, 2026
CVE-2026-16574 Medium 4.3 0.1% 5.0.10 and earlier 5.0.11 August 3, 2026
CVE-2026-66699 Medium 4.3 0.2% 5.0.10 and earlier 5.0.11 July 29, 2026
CVE-2026-16565 Medium 4.3 0.2% 5.0.8 and earlier 5.0.9 July 24, 2026
CVE-2026-16564 Medium 4.3 0.2% 5.0.8 and earlier 5.0.9 July 24, 2026
CVE-2026-11987 Medium 4.3 0.5% 0 to 5.0.4 (inclusive) 5.0.5 June 27, 2026
CVE-2026-10023 Medium 4.3 0.2% 0 to 5.0.3 (inclusive) 5.0.4 June 18, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.