CVE-2026-107773

{
  "etk_id": "ETK-2026-3595",
  "cve_id": "CVE-2026-107773",
  "display_id": "CVE-2026-107773",
  "ghsa_id": "GHSA-59gw-w7gg-prj6",
  "euvd_id": "EUVD-2026-117352",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper authorization in Dokan order endpoints",
  "summary": "Dokan WordPress plugin versions before 5.3.3 expose insufficiently protected access to certain individual order records and order notes. An unauthenticated remote party may view customer and order data or modify notes for affected orders when the vulnerable order functionality is reachable.",
  "mitigation": "Update Dokan to version 5.3.3 or later. Review order-note and order activity for unexpected changes after updating.",
  "vendor": null,
  "product": "Dokan: AI Powered WooCommerce Multivendor Marketplace Solution",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 5.3.3"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "5.3.3"
      ],
      "package_name": "Dokan: AI Powered WooCommerce Multivendor Marketplace Solution",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 35.30726428333333,
  "t0_at": "2026-11-05T06:00:29.025000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-05T07:29:36.326535+00:00",
      "days": 0.0618900640625,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T06:00:29.025000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-05T06:00:29.025000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-05T06:00:29.025000+00:00",
      "url": "https://github.com/advisories/GHSA-59gw-w7gg-prj6"
    }
  }
}