Unknown Dokan vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Dokan, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.5CVE-2022-3194dokandokan+2
EPSS score
0.49%
The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allow them to run stored XSS attacks against other users like site administrators.9.8CVE-2022-3915dokandokan+2
EPSS score
1.13%
The Dokan WordPress plugin before 3.7.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users