01 Record

CVE-2026-16576

Dokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST API

HighPUBLISHEDCNA: WPScan

Base score7.2 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

02 Description

Dokan < 5.0.14 - Shop Manager+ Arbitrary Plugin Installation/Activation via REST API

Published

2026-08-21 06:00Z19 HR AGO

Last updated

2026-08-21 12:53Z12 HR AGO

Reserved

2026-07-22

Assigning CNA

WPScan

Record state

PUBLISHED

Severity

High (CVSS 7.2)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

5e0428aaa44efa7f1400db38f008cb79192213a2a2de0d6aa7dfeaa50f2fbeb5

VendorProductVersionsPlatforms