PT-2026-137396

CVE-2026-107775

·

Published

2026-11-05

·

Updated

2026-11-05

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.3.3 does not verify that the acting administrator is authorized to manage each selected user before enabling that user's marketplace seller status, allowing a subsite Administrator on WordPress Multisite to enable selling for users outside their own site, including network-level users they cannot otherwise manage.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CVE-2026-107775
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com