Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vendor's actual outstanding balance when recording a reverse-withdrawal payment, allowing a vendor to credit their reverse-withdrawal ledger with an arbitrary amount and clear their real commission debt without paying.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-16577 Dokan WordPress Plugin Allows Vendors to Clear Debt Through Arbitrary Credit https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-16577
Post summary
The entry describes a newly disclosed CVE in the Dokan WordPress Plugin that enables vendors to clear debt via arbitrary credit manipulation, with no evidence of active exploitation, PoC, or patch offered.
CVE-2026-16577 The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.0.14 does not validate a client-supplied payment amount against the vend… https://www.cve.org/CVERecord?id=CVE-2026-16577
Post summary
The text announces a vulnerability in the Dokan WooCommerce plugin that fails to validate client-supplied payment amounts, but provides no further details or evidence of exploitation.