Product by weDevs

    Dokan Pro

    7 known vulnerabilities in Dokan Pro (weDevs), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Dokan Pro (weDevs)
    CriticalCVE-2024-3922

    Dokan Pro <= 3.10.3 - Unauthenticated SQL Injection

    also in 1 other product

    		10.0
    HighCVE-2026-12224

    weDevs Dokan Pro: Improper Privilege Management

    		8.8
    HighCVE-2026-12077

    Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters

    		7.5
    HighCVE-2025-5931

    Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation

    		8.8
    MediumCVE-2026-12079

    Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter

    		6.5
    HighCVE-2026-65492

    WordPress Dokan Pro plugin < 5.0.7 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2025-12809

    dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure

    		5.3

    All products by weDevs