Dokan Pro Unauthenticated SQL Injection POC | CVSS 10
by Loki - Monday July 8, 2024 at 02:16 PM
RaidForums
Member
Posts: 10
Threads: 0
Joined: Jan 2026
Reputation: 0

#41
01-30-2026, 11:13 PM
(07-08-2024, 02:16 PM)Loki Wrote:
The Dokan Pro plugin for WordPress is vulnerable to SQL Injection via the 'code' parameter in all versions up to, and including, 3.10.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.

POC:


Omnicer
ty my frind, love it
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  VenusChen Tianyue Network Security Audit System - SQL Injection Loki 8 1,077 09-16-2026, 08:54 PM
Last Post: anomalyuser
  Google Dorks for finding SQL injection vulnerabilities and other security issues 1yush 71 3,452 09-15-2026, 02:29 AM
Last Post: Snyergy
  new wordpress website takeover vuln (video + poc ) zinzeur 314 27,616 09-07-2026, 03:09 AM
Last Post: zai2307
  matsploit pro free wsamx166 50 3,304 07-08-2026, 12:30 AM
Last Post: cookky1
  [POC] Google OAuth "MultiLogin" endpoint 0-day Farfallaiero 106 13,331 02-10-2026, 03:34 PM
Last Post: birhikayemvar



 Users browsing this thread: