CVE-2026-107776
The Dokan WordPress plugin before 5.3.3 does not reconcile the amount credited to a vendor's reverse-withdrawal ledger against the amount ac
CVSS
2.2
Baixa
EPSS
0.2%
p10
KEV
—
Exploit Today
3
0-100
Publicado: 5 de nov. de 2026 · Última mod.: 5 de nov. de 2026
Ainda não há histórico EPSS suficiente.
The Dokan WordPress plugin before 5.3.3 does not reconcile the amount credited to a vendor's reverse-withdrawal ledger against the amount actually collected for the payment order, allowing a vendor to clear their outstanding commission debt while paying less than the balance owed when a discount coupon is applied at checkout.
Nenhum CVE relacionado por CWE ou produto.