CVE Database /
CVE-2023-26525
CVE · High
CVE-2023-26525 — Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy [dokan-lite] < 3.7.13
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-26525
|
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy [dokan-lite] < 3.7.13 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') |
High
7.1
|
< 3.7.13
|
3.7.13 |
2023-03-02 |
—
|
CVE-2023-26525
The Dokan plugin versions through 3.7.12 contains a SQL injection vulnerability affecting multiple parameters due to inadequate escaping of user-supplied input and improper query preparation. Authenticated users with vendor-level privileges or higher can inject malicious SQL code to execute arbitrary queries and access sensitive database information. The vulnerability was patched in version 3.7.13.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings