CVE-2026-119485Medium· 5.3▾ SunlitMissing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.2%
Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2.
dokan-lite <= 5.3.2Update the WordPress Dokan plugin to the latest available version (at least 5.3.3).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-119487Medium· 5.3WordPress Dokan plugin <= 5.3.2 - Broken Access Control vulnerability
CVE-2026-121993Medium· 4.3wePOS before 2.0.3 Missing Authorization via payment/process Endpoint
CVE-2026-109891Medium· 6.4WordPress Happy Addons for Elementor plugin <= 3.50.1 - Broken Access Control vulnerability
CVE-2026-25448Medium· 4.3WordPress WP ERP plugin <= 1.17.10 - Broken Access Control vulnerability
CVE-2026-52708Medium· 4.3WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability
CVE-2026-48884Medium· 5.3WordPress WP User Frontend plugin <= 4.3.13 - Broken Access Control vulnerability