Dokan: AI Powered WooCommerce Multivendor Marketplace Solution — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in Dokan: AI Powered WooCommerce Multivendor Marketplace Solution, with AI-generated Chinese analysis, references, and POCs.

Vendor: Unknown

CVE ID	Title	CVSS	Severity	Published
CVE-2026-16577	Dokan < 5.0.14 - Vendor+ Reverse Withdrawal Ledger Manipulation via Client-Supplied Amount	-	-	2026-08-21
CVE-2026-16575	Dokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint	-	-	2026-08-21
CVE-2026-16576	Dokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST API	-	-	2026-08-21
CVE-2026-16574	Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint	-	-	2026-08-08
CVE-2026-16565	Dokan < 5.0.9 - Vendor+ Cross-Vendor Product Attribute Modification via Product Attribute REST API	-	-	2026-08-03
CVE-2026-16564	Dokan < 5.0.9 - Vendor+ Arbitrary Order Status Modification via orders/bulk-actions REST Endpoint	-	-	2026-08-03

All 6 known CVE vulnerabilities affecting Dokan: AI Powered WooCommerce Multivendor Marketplace Solution with full Chinese analysis, references, and POCs where available.