Threats tagged 'ghsa-cjjh-8xvm-fchv'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-16565Dokan: AI Powered WooCommerce Multivendor Marketplace Solution (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.3%2026-08-03CVE Database V5CVE-2026-16565 A vulnerability in the Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before version 5.0.9 allows users with vendor accounts to modify product attributes of other vendors. This occurs because the plugin does not verify product ownership on certain REST write endpoints. EPSS 0.3%Vulnerability CWE-639 #ghsa-cjjh-8xvm-fchv	CVE Database V5	2026-08-03

Page 1 of 1