01 Record

CVE-2026-16575

Dokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint

MediumPUBLISHEDCNA: WPScan

Base score5.3 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

02 Description

Dokan < 5.0.14 - Unauthenticated Commission Settings Disclosure via Store Categories REST Endpoint

Published

2026-08-21 06:00Z19 HR AGO

Last updated

2026-08-21 12:51Z12 HR AGO

Reserved

2026-07-22

Assigning CNA

WPScan

Record state

PUBLISHED

Severity

Medium (CVSS 5.3)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weaknesses

SSVC decision

ExploitationnoneAutomatableyesTechnical Impactpartial

Data version

5.2

Document digest

de50a7851f019a5f40c2e004cee06cb1d12cfc1145589f607ba5ef0abe154ee7

VendorProductVersionsPlatforms