{"affected":[],"aliases":["CVE-2026-107773"],"database_specific":{"cwe_ids":[],"github_reviewed":false,"github_reviewed_at":null,"nvd_published_at":"2026-11-05T06:17:06Z","severity":null},"details":"The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution  WordPress plugin before 5.3.3 does not correctly verify authorization when serving a single order and its order notes, allowing unauthenticated attackers to read customer and order information and to add or delete order notes for a subset of orders.","id":"GHSA-59gw-w7gg-prj6","modified":"2026-11-05T06:34:37Z","published":"2026-11-05T06:34:37Z","references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107773"},{"type":"WEB","url":"https://wpscan.com/vulnerability/7ef1f47f-60d2-41f0-afca-584752503fae"}],"schema_version":"1.4.0","severity":[]}