Threats tagged 'ghsa-w8pm-p328-pc5h'

The Dokan AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress versions up to 4.3.1 is vulnerable to sensitive information exposure via its REST API. The vulnerability allows unauthenticated attackers to access reviewer email addresses, usernames, and user IDs through the '/dokan/v1/stores/{id}/reviews' endpoint. Exploitation requires the Pro version of the plugin to be installed and activated with store reviews enabled.