CVE-2026-66699: WordPress Dokan plugin <= 5.0.10 - Broken Access Control vulnerability

Published Aug 6, 2026

Updated

Custom role Broken Access Control in Dokan <= 5.0.10 versions.

Affected Software

1 affected component

WordPress Dokan plugin<=5.0.10

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Dokan Plugin to a version that resolves this vulnerability.
Fixed in 5.0.11

Aug 6, 2026

CVE Published

via MITRE·02:28 PM

Data Sourced

via MITRE·02:28 PM

RemedyDescriptionSeverityWeakness

The severity of CVE-2026-66699 is rated as medium with a score of 5.3.

To fix CVE-2026-66699, upgrade the Dokan plugin to version 5.0.11 or later.

CVE-2026-66699 is identified as a Broken Access Control vulnerability.

CVE-2026-66699 affects the WordPress Dokan plugin versions 5.0.10 and earlier.

CVE-2026-66699 was published on August 6, 2026.