Dokan Pro

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Dokan Pro

Information

Software Type Plugin
Software Slug dokan-pro
Software Status Active
Software Author wedevs
Software Website dokan.co
Software Active Installs 15,488
Software Record Last Updated April 3, 2026

8 Vulnerabilities

Submit a Vulnerability
Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpoint
8.8
CVE-2026-12224
Jun 30, 2026
Researcher: 0xd4rk5id3
Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters
7.5
CVE-2026-12077
Jun 24, 2026
Researcher: Bao Le
Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
6.5
CVE-2026-12079
Jun 24, 2026
Researcher: Bao Le
Dokan Pro <= 5.0.4 - Unauthenticated Privilege Escalation
9.8
CVE-2026-56033
Jun 23, 2026
Researcher: VanTastic
dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure
5.3
CVE-2025-12809
Dec 15, 2025
Researcher: Ahmed Rayen Ayari
Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation
8.8
CVE-2025-5931
Aug 25, 2025
Researcher: Foxyyy
Dokan Pro <= 5.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-39497
May 16, 2025
Researcher: Trương Hữu Phúc (truonghuuphuc)
Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection
10.0
CVE-2024-3922
Jun 11, 2024
Researcher: villu164
Title Status CVE ID CVSS Researchers Date
Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpoint Patched CVE-2026-12224 8.8 0xd4rk5id3 June 30, 2026
Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters Patched CVE-2026-12077 7.5 Bao Le June 24, 2026
Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter Patched CVE-2026-12079 6.5 Bao Le June 24, 2026
Dokan Pro <= 5.0.4 - Unauthenticated Privilege Escalation Patched CVE-2026-56033 9.8 VanTastic June 23, 2026
dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure Patched CVE-2025-12809 5.3 Ahmed Rayen Ayari December 15, 2025
Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation Patched CVE-2025-5931 8.8 Foxyyy August 25, 2025
Dokan Pro <= 5.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-39497 6.4 Trương Hữu Phúc (truonghuuphuc) May 16, 2025
Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection Patched CVE-2024-3922 10.0 villu164 June 11, 2024

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation