Now officially on WordPress.org

CVE Database / CVE-2026-66699

CVE

CVE-2026-66699 — Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy [dokan-lite] < 5.0.11

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-66699 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy [dokan-lite] < 5.0.11 — Unknown < 5.0.11 5.0.11 0000-00-00 —

CVE-2026-66699

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 5.0.10. This makes it possible for authenticated attackers, with custom role-level access and above, to perform an unauthorized action.

Source: Wordfence

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings