A vulnerability, classified as problematic, has been found in dokaninc Dokan Plugin up to 5.0.4 on WordPress. The manipulation of the argument ID leads to authorization bypass. This vulnerability is traded as CVE-2026-11987. It is possible to initiate the attack remotely.
| Vendor | Product | Versions |
|---|---|---|
| dokan | dokan: ai powered woocommerce multivendor marketplace solution | 0 |
Updated vendor to 'dokaninc', product to 'Dokan Plugin', severity to 'HIGH', and noted that the vulnerability is actively exploited.
Initial creation
