Live › vulnerability › CVE-2026-119487
Dokan Lite, a WooCommerce marketplace plugin for WordPress, has a missing authorization check that lets access control settings be bypassed. Per the NVD entry, an attacker can exploit incorrectly configured access control levels in versions through 5.3.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-03 17:21 UTC. All times on this page are UTC.
Sites running the Dokan Lite plugin on WordPress with WooCommerce marketplace features enabled are in scope, up to and including version 5.3.2. The sources do not describe the exact configuration needed to reach the flaw, so sites that do not run Dokan Lite can skip it.
No product ranges from the sources yet.
wp plugin get dokan-lite --field=version5.3.2Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-119487")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.