https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T07:05:36.132285+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-107773 CVE-2026-107773 — Dokan < 5.3.3 - Unauthenticated Order PII Disclosure and Note Manipulation via Orders REST Endpoint 2026-11-09T07:05:36.145443+00:00

Affected: Unknown Dokan: AI Powered WooCommerce Multivendor Marketplace Solution

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not correctly verify authorization when serving a single order and its order notes, allowing unauthenticated attackers to read customer and order information and to add or delete order notes for a subset of orders.