https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T02:11:59.512921+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-357299 EUVD-2026-357299 2026-10-10T02:11:59.516112+00:00 EUVD-2026-357299 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16577 fkie_cve-2026-16577 2026-10-10T02:11:59.516146+00:00

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vendor's actual outstanding balance when recording a reverse-withdrawal payment, allowing a vendor to credit their reverse-withdrawal ledger with an arbitrary amount and clear their real commission debt without paying.

 https://cve.radiocsirt.org/vuln/ghsa-qc72-vcjc-wr3h GHSA-qc72-vcjc-wr3h 2026-10-10T02:11:59.516188+00:00

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vendor's actual outstanding balance when recording a reverse-withdrawal payment, allowing a vendor to credit their reverse-withdrawal ledger with an arbitrary amount and clear their real commission debt without paying.