Now officially on WordPress.org

CVE Database / CVE-2025-53425

CVE · High

CVE-2025-53425 — Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy [dokan-lite] < 4.1.4

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-53425 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy [dokan-lite] < 4.1.4 Incorrect Privilege Assignment High 7.2 < 4.1.4 4.1.4 2025-09-20 —

CVE-2025-53425

The Dokan plugin for WooCommerce has a security flaw that allows authorized users with shop management privileges or higher to obtain administrative account access in versions prior to 4.1.3. This vulnerability enables malicious actors to escalate their privileges within the WordPress system. Affected installations include those running version 4.1.3 and earlier.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings