Threats tagged 'ghsa-rgp2-2vg6-97f5'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2026-16564Dokan: AI Powered WooCommerce Multivendor Marketplace Solution (WordPress plugin) · Insecure Direct Object Reference Medium4.3EPSS 0.3%2026-08-03CVE Database V5CVE-2026-16564 A vulnerability in the Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before version 5.0.9 allows users with a vendor account to change the status of any WooCommerce order on the marketplace without verifying order ownership. This affects a REST endpoint that performs bulk order-status changes, enabling unauthorized modification of orders belonging to other vendors and customers. EPSS 0.3%Vulnerability CWE-639 #ghsa-rgp2-2vg6-97f5	CVE Database V5	2026-08-03

Page 1 of 1