Doliconnect
Doliconnect has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.2, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Doliconnect has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Nguyen Xuan Chien. Doliconnect is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-53574Doliconnect <= 9.3.2 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
Doliconnect
Author
ptibogxiv
Use this plugin to greatly improve relations with your customers. No WooCommerce or other e-shop is needed! This module only support Dolibarr’s internal plugins and options. For more support, you will need addons. If you like the plugin, feel free to rate it (on the right side of this page)! You can test it live on https://ptibogxiv.dev Credits We would like to thank these contributors and plugins: gdpr-data-request-form
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C