CVE-2026-16576Disclosure

LOWCVSS 7.2 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin REST API routes, checking only for a WooCommerce management capability instead of the Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14-installation capability, allowing users such as Shop Managers to install and activate arbitrary Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 from WordPress.org.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://wpscan.com/vulnerability/801e9008-e912-4606-8c21-3d31dc0bd2c7/

Weakness type (CWE)

CWE-284

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 3 classified signals
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets4 URLs

By indicator

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds46d
Disclosure
CVE-2026-16576 Dokan Plugin Allows Unauthorized Installation of Other Pl... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-16576 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The post announces a new vulnerability (CVE‑2026‑16576) in the Dokan plugin and provides a link to a vulnerability details page, but offers no PoC, exploit code, patch information, or evidence of active exploitation.
00000100
4.1K followersView on X
Infoflowcloud@infoflowcloud46d
Disclosure
🚨*CVE* CVE-2026-16576 The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin RES… https://www.cve.org/CVERecord?id=CVE-2026-16576 ----- Traducción: CVE-2026-16576 El … http://infoflow.cloud`
Post summary
The tweet announces a pre‑5.0.14 vulnerability in the Dokan WooCommerce Multivendor Marketplace plugin, highlighting improper capability checks but providing no PoC, exploit tool, patch, or evidence of active exploitation.
0000016
102 followersView on X
CVE@CVEnew46d
Disclosure
CVE-2026-16576 The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not correctly check user capabilities on some of its admin RES… https://www.cve.org/CVERecord?id=CVE-2026-16576
Post summary
The tweet announces a discovered capability‑check flaw in the Dokan WordPress plugin (versions <5.0.14) and refers to the CVE record, but does not mention PoC, exploit code, active exploitation, or a patch.
00000707
58.0K followersView on X

Explore more

Back to dashboard