PULSEUnderground Intel

LIVE24signals / 24h

FEED

ransomkrybit reclama a chkck.com · Technologyransomqilin reclama a WellPerf · GB · Healthcareransomthegentlemen reclama a Sirl · PT · Not Foundransomthegentlemen reclama a Disney Family · US · Financial Servicesransomqilin reclama a Corporate 360 Business Solutions · CA · Professional Servicesransomqilin reclama a Assos Pharmaceuticals · TR · Healthcareransomqilin reclama a Cano Industrial · MX · Manufacturingransomqilin reclama a Triton Trading · PE · Financial Servicesransomqilin reclama a AppleOne Properties · PH · Not Foundransommoneymessage reclama a Indigo Energy · CA · Energyransomqilin reclama a Sunway Berhad · MY · Hospitality and Tourismransomkairos reclama a LR Reed · AU · Business Servicesransomnova reclama a VNSO · Not Foundransomblacknevas reclama a Zuni Shopping Center, Inc. · US · Consumer Servicesransomkrybit reclama a chkck.com · Technologyransomqilin reclama a WellPerf · GB · Healthcareransomthegentlemen reclama a Sirl · PT · Not Foundransomthegentlemen reclama a Disney Family · US · Financial Servicesransomqilin reclama a Corporate 360 Business Solutions · CA · Professional Servicesransomqilin reclama a Assos Pharmaceuticals · TR · Healthcareransomqilin reclama a Cano Industrial · MX · Manufacturingransomqilin reclama a Triton Trading · PE · Financial Servicesransomqilin reclama a AppleOne Properties · PH · Not Foundransommoneymessage reclama a Indigo Energy · CA · Energyransomqilin reclama a Sunway Berhad · MY · Hospitality and Tourismransomkairos reclama a LR Reed · AU · Business Servicesransomnova reclama a VNSO · Not Foundransomblacknevas reclama a Zuni Shopping Center, Inc. · US · Consumer Services

CVE WatchJul 23, 2026

CVE-2026-65495

Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.

CVSS

7.5

High

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Jul 23, 2026 · Last modified: Jul 23, 2026 · CWE-862

EPSS · 30d

Not enough EPSS history yet.

Technical description

Unauthenticated Broken Access Control in Dokan Pro <= 5.0.3 versions.

Official references

patchstack.comhttps://patchstack.com/database/wordpress/plugin/dokan-pro/vulnerability/wordpress-dokan-pro-plugin-5-0-3-broken-access-control-vulnerability?_s_id=cve

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-658958.5 HIG

——0Grav API Plugin versions before 1.0.10 fail to restrict write access to security-critical plugin configuration scopes, allowing authenticated users with api.config.write privilege to modify rate limiting and CORS settings. Attackers can disable rate limiting site-wide to enable credential brute-forcing attacks and reconfigure CORS policies to include attacker-controlled origins with credentials enabled.3h CVE-2026-655374.3 MED

——0Subscriber Broken Access Control in Cyr to Lat reloaded – transliteration of links and file names <= 1.3.3 versions.3h CVE-2026-655314.8 MED

——0Unauthenticated Broken Access Control in Qubely <= 1.8.14 versions.3h CVE-2026-655304.3 MED

——0Subscriber Broken Access Control in TemplateSpare <= 4.2.2 versions.3h CVE-2026-655295.3 MED

——0Unauthenticated Broken Access Control in Graphina <= 3.1.12 versions.3h CVE-2026-655255.3 MED

——0Unauthenticated Broken Access Control in Civi Framework <= 2.2.0 versions.3h