Security Advisory

CVE-2026-16577

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-21 06:00:16

Last updated 2026-08-21 12:54:06

Assigner WPScan

CVSS score 2.7

State PUBLISHED

Description

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vendor's actual outstanding balance when recording a reverse-withdrawal payment, allowing a vendor to credit their reverse-withdrawal ledger with an arbitrary amount and clear their real commission debt without paying.

← Browse all CVEs View on cve.org ↗