https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 05:04:38 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-348667 EUVD-2026-348667 https://cve.radiocsirt.org/vuln/euvd-2026-348667 https://cve.radiocsirt.org/vuln/fkie_cve-2026-8761 <p>The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the `CustomersController` REST controller (`includes/REST/CustomersController.php`), which re-registers WooCommerce&#39;s customer CRUD routes under the `/dokan/v1/customers/` namespace and replaces WooCommerce&#39;s native `manage_woocommerce` capability check with a vendor-only check that inspects the **requesting** user&#39;s role and never validates the **target** user. This makes it possible for authenticated attackers with Vendor/Seller-level access and above to read, modify, or delete any WordPress user — including administrators — via `GET`/`PUT`/`DELETE` requests against `/wp-json/dokan/v1/customers/{id}`. Setting the `password` parameter on an administrator&#39;s record yields a full site takeover.</p> <p>The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the `CustomersController` REST controller (`includes/REST/CustomersController.php`), which re-registers WooCommerce&#39;s customer CRUD routes under the `/dokan/v1/customers/` namespace and replaces WooCommerce&#39;s native `manage_woocommerce` capability check with a vendor-only check that inspects the **requesting** user&#39;s role and never validates the **target** user. This makes it possible for authenticated attackers with Vendor/Seller-level access and above to read, modify, or delete any WordPress user — including administrators — via `GET`/`PUT`/`DELETE` requests against `/wp-json/dokan/v1/customers/{id}`. Setting the `password` parameter on an administrator&#39;s record yields a full site takeover.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-8761 https://cve.radiocsirt.org/vuln/ghsa-q7fj-7hxw-7x69 <p>The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the `CustomersController` REST controller (`includes/REST/CustomersController.php`), which re-registers WooCommerce&#39;s customer CRUD routes under the `/dokan/v1/customers/` namespace and replaces WooCommerce&#39;s native `manage_woocommerce` capability check with a vendor-only check that inspects the **requesting** user&#39;s role and never validates the **target** user. This makes it possible for authenticated attackers with Vendor/Seller-level access and above to read, modify, or delete any WordPress user — including administrators — via `GET`/`PUT`/`DELETE` requests against `/wp-json/dokan/v1/customers/{id}`. Setting the `password` parameter on an administrator&#39;s record yields a full site takeover.</p> <p>The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1. This is due to a missing authorization check in the `CustomersController` REST controller (`includes/REST/CustomersController.php`), which re-registers WooCommerce&#39;s customer CRUD routes under the `/dokan/v1/customers/` namespace and replaces WooCommerce&#39;s native `manage_woocommerce` capability check with a vendor-only check that inspects the **requesting** user&#39;s role and never validates the **target** user. This makes it possible for authenticated attackers with Vendor/Seller-level access and above to read, modify, or delete any WordPress user — including administrators — via `GET`/`PUT`/`DELETE` requests against `/wp-json/dokan/v1/customers/{id}`. Setting the `password` parameter on an administrator&#39;s record yields a full site takeover.</p> https://cve.radiocsirt.org/vuln/ghsa-q7fj-7hxw-7x69