https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 04:49:50 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-351238 EUVD-2026-351238 https://cve.radiocsirt.org/vuln/euvd-2026-351238 https://cve.radiocsirt.org/vuln/fkie_cve-2026-16574 <p>The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant their own customer free download access to another vendor&#39;s paid downloadable files.</p> <p>The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant their own customer free download access to another vendor&#39;s paid downloadable files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-16574 https://cve.radiocsirt.org/vuln/ghsa-9qg2-vxvm-6fvv <p>The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant their own customer free download access to another vendor&#39;s paid downloadable files.</p> <p>The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant their own customer free download access to another vendor&#39;s paid downloadable files.</p> https://cve.radiocsirt.org/vuln/ghsa-9qg2-vxvm-6fvv