CyberRota Analysis
AI-GeneratedThe Dokan plugin for WordPress, prior to version 5.2.0, is vulnerable as it fails to verify the identity of vendors when requesting commission calculations, potentially exposing sensitive commission rates and fees set by the marketplace administrator for other vendors. This could lead to unauthorized disclosure of financial information among vendors, undermining the integrity of the marketplace. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordPress plugin before 5.2.0 does not verify that the vendor a commission calculation is requested for is the requesting vendor, allowing vendors to disclose the commission rate and fixed fee the marketplace administrator configured for other vendors.