Unauthenticated Broken Access Control in Dokan Pro by WPDeveloper
CVE-2026-65495

7.5HIGH

Key Information:

Vendor

WordPress
Status
Dokan Pro
Vendor
CVE Published:
23 July 2026

What is CVE-2026-65495?

An unauthenticated broken access control vulnerability has been identified in Dokan Pro versions up to 5.0.3. This flaw allows attackers to gain unauthorized access to sensitive areas of the application without proper authentication, potentially leading to the manipulation or exposure of sensitive data. It is crucial for users to update to the latest version to mitigate this risk and ensure their site remains secure.

Affected Version(s)

Dokan Pro <= 5.0.3

References

https://patchstack.com/database/wordpress/plugin/dokan-pr...
vdb-entry

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

VanTastic | Patchstack Bug Bounty Program
.