{"id":"CVE-2026-16574","state":"PUBLISHED","title":"Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint","description":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution  WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant their own customer free download access to another vendor's paid downloadable files.","publishedAt":"2026-08-08T06:00:11.760Z","updatedAt":"2026-08-11T19:36:27.601Z","severity":{"score":5.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","source":"CISA-ADP"},"assigner":"WPScan","products":["Unknown Dokan: AI Powered WooCommerce Multivendor Marketplace Solution"],"affected":[{"vendor":"Unknown","product":"Dokan: AI Powered WooCommerce Multivendor Marketplace Solution","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.0.11","versionType":"semver"}]}],"references":["https://wpscan.com/vulnerability/b38dc6a4-a590-402f-88e1-3624a22c7348/"],"weaknesses":["CWE-639"],"ingestedAt":"2026-10-29T20:11:00.674Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/16xxx/CVE-2026-16574.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-16574","state":"PUBLISHED","datePublished":"2026-08-08T06:00:11.760Z","dateUpdated":"2026-08-11T19:36:27.601Z","assignerShortName":"WPScan","assignerOrgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateReserved":"2026-07-22T13:01:02.571Z"},"containers":{"cna":{"title":"Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via Order Downloads REST Endpoint","descriptions":[{"lang":"en","value":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution  WordPress plugin before 5.0.11 does not verify that a downloadable product belongs to the requesting vendor before granting download permissions through one of its order REST endpoints, allowing an authenticated vendor to grant their own customer free download access to another vendor's paid downloadable files."}],"affected":[{"vendor":"Unknown","product":"Dokan: AI Powered WooCommerce Multivendor Marketplace Solution","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.0.11","versionType":"semver"}]}],"references":[{"url":"https://wpscan.com/vulnerability/b38dc6a4-a590-402f-88e1-3624a22c7348/","tags":["exploit","vdb-entry","technical-description"]}],"problemTypes":[{"descriptions":[{"description":"CWE-639 Authorization Bypass Through User-Controlled Key","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"WPScan","orgId":"1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81","dateUpdated":"2026-08-08T06:00:11.760Z"},"credits":[{"lang":"en","value":"Sai Praneeth Koti","type":"finder"},{"lang":"en","value":"WPScan","type":"coordinator"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"WPScan CVE Generator"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":5.4,"attackVector":"NETWORK","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","integrityImpact":"LOW","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"LOW","confidentialityImpact":"LOW"}},{"other":{"type":"ssvc","content":{"timestamp":"2026-08-11T19:35:44.407320Z","id":"CVE-2026-16574","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-639","type":"CWE","lang":"en","description":"CWE-639 Authorization Bypass Through User-Controlled Key"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-08-11T19:36:27.601Z"}}]}}}