UNKNOWN NVD

CVE-2026-107773

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly verify authorization when serving a single

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly verify authorization when serving a single order and its order notes, allowing unauthenticated attackers to read customer and order information and to add or delete order notes for a subset of orders.

References

https://wpscan.com/vulnerability/7ef1f47f-60d2-41f0-afca-584752503fae/

Published: 2026-11-05 · Source: NVD · Feed updated: 2026-11-05

This unknown severity vulnerability was published on 2026-11-05 via NVD.

vulnfeed aggregates 16624 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.