CVE Database /
CVE-2026-49780
CVE · High
CVE-2026-49780 — Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy [dokan-lite] < 5.0.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-49780
|
Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy [dokan-lite] < 5.0.3 |
Incorrect Privilege Assignment |
High
8.8
|
< 5.0.3
|
5.0.3 |
2026-06-03 |
—
|
CVE-2026-49780
Authenticated users with Custom-level access or higher can exploit a vulnerability in the Dokan plugin, affecting versions up to and including 5.0.2, allowing them to gain elevated permissions. The flaw enables these users to escalate their privilege level. This issue affects all versions of the plugin prior to version 5.0.3.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings