Dokan Pro

Dokan Pro has 12 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; 8 are fixed and 4 remain unpatched as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 10.0 out of 10. Severity breakdown: 2 critical and 5 high. 2026 was the busiest year with 8 disclosures.

The most common weakness is SQL Injection, behind 4 of the records (33%). Other recurring categories include Cross-Site Scripting, Improper Privilege Management.

8 of the records (67%) have a vendor fix, while 4 remain unpatched. The oldest unresolved one dates back to 2026.

9 independent researchers contributed these findings, most of them (2) reported by Bao Le.

Strategic Overview

Avg CVSSHigh

7.5/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Dokan Pro vulnerabilities before they are exploited.

Most severe open issueCVSS 7.5CVE-2026-65493

Dokan Pro <= 5.0.2 - Authenticated (Subscriber+) PHP Object Injection

Read the full analysis

Vulnerability Records

12 records


2026-07-23 00:00	Dokan Pro <= 5.0.2 - Authenticated (Subscriber+) SQL Injection Dokan Pro <= 5.0.2	`CVE-2026-65494`	6.5 Medium	Expatch	No
2026-07-23 00:00	Dokan Pro <= 5.0.0 - Unauthenticated Stored Cross-Site Scripting Dokan Pro <= 5.0.0	`CVE-2026-65492`	7.2 High	dutafi	No
2026-07-23 00:00	Dokan Pro <= 5.0.3 - Missing Authorization Dokan Pro <= 5.0.3	`CVE-2026-65495`	5.3 Medium	VanTastic	No
2026-07-23 00:00	Dokan Pro <= 5.0.2 - Authenticated (Subscriber+) PHP Object Injection Dokan Pro <= 5.0.2	`CVE-2026-65493`	7.5 High	Expatch	No
2026-06-30 17:43	Dokan Pro <= 5.0.4 - Authenticated (Vendor+) Privilege Escalation via update_capabilities REST Endpoint Dokan Pro <= 5.0.4	`CVE-2026-12224`	8.8 High	0xd4rk5id3	Yes
2026-06-24 15:14	Dokan Pro <= 5.0.4 - Unauthenticated SQL Injection via 'latitude' and 'longitude' Parameters Dokan Pro <= 5.0.4	`CVE-2026-12077`	7.5 High	Bao Le	Yes
2026-06-24 15:13	Dokan Pro <= 5.0.4 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter Dokan Pro <= 5.0.4	`CVE-2026-12079`	6.5 Medium	Bao Le	Yes
2026-06-23 00:00	Dokan Pro <= 5.0.4 - Unauthenticated Privilege Escalation Dokan Pro <= 5.0.4	`CVE-2026-56033`	9.8 Critical	VanTastic	Yes
2025-12-15 16:39	dokan pro <= 4.1.3 - Missing Authorization to Unauthenticated Sensitive Information Exposure Dokan Pro <= 4.1.3	`CVE-2025-12809`	5.3 Medium	Ahmed Rayen Ayari	Yes
2025-08-25 16:11	Dokan Pro <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation Dokan Pro <= 4.0.5	`CVE-2025-5931`	8.8 High	Foxyyy	Yes

Showing 1–10 of 12 reports