Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 46% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

Modeled from public signals only; the real figure depends on pricing and conversion we cannot see. The range spans more than 10x because wp.org publishes install counts as broad bands, and conversion and price compound on top. Read the midpoint as an order of magnitude, not a valuation.

Older reviews are full of praise for the marketplace features and fast support, while the newest ones report the 5.0 update breaking live sites, plugin conflicts, and weeks of support that doesn't resolve anything.

1. ★★★★★ mhdshb02

   2mo ago

   Dokan is an exceptional WordPress plugin that truly transforms the way we approach multi-vendor e-commerce. With its user-friendly interface and comprehensive features, it empowers both vendors and site owners to create a seamless online marketplace. The setup process is straightforward, making it accessible even for those who may not be tech-savvy. The plugin offers a plethora of customization options, allowing vendors to manage their stores effortlessly. From product listings to order management, every aspect is well thought out and easy to navigate. The support team is also commendable, providing timely assistance and guidance whenever needed. One area for improvement would be the implementation of a robust RTL (Right-to-Left) specification. This enhancement would significantly benefit users who operate in languages that read from right to left, ensuring a more inclusive experience for all vendors and customers. Overall, I wholeheartedly give Dokan a five-star rating! It’s a powerful tool that has made my e-commerce journey enjoyable and successful. Highly recommended for anyone looking to build a thriving online marketplace!

   Read on wp.org ↗
2. ★★★★★ KOUKI

   2mo ago

   We have been using Dokan for around six years, so it is genuinely disappointing to be writing this review. The Dokan 5.0 update impacted our live site considerably and left Dokan Pro/Starter effectively unusable on our live marketplace. Starter has been switched off since 1 May, and we are now seven weeks later with no meaningful resolution. Over this period, support has not provided the level of actionable assistance we would expect from a platform we have supported and paid for over many years. Instead, we have often felt that the issues were being shifted to other plugins, our theme, hosting, or other external factors, rather than Dokan taking real ownership of the problem. We have made significant changes to our site over the past several months in an effort to keep working with Dokan, including changing our theme, changing pricing plugins, and changing feed generation plugins. These were major changes for a live marketplace and came with real disruption, cost, and lost time. What is most disappointing is that after six years as a customer, Dokan appears comfortable seeing us leave without a proper resolution, meaningful escalation, or even a refund for the current subscription period, despite the product being unusable for us since 1 May. This review is not written lightly. We have invested years into using Dokan and genuinely wanted the platform to work for our business. However, the lack of urgency, ownership, and fair support during this issue has been extremely disappointing. I hope Dokan takes this feedback seriously and improves how it supports long-standing customers when major updates cause serious disruption.

   Read on wp.org ↗
3. ★★★★★ miata2

   4mo ago

   We had a very disappointing experience with the Dokan Vendor plugin. It is extremely buggy and caused multiple issues across our website, including layout breaks and conflicts with other essential plugins. Instead of improving our marketplace, it created constant technical headaches and instability. Even worse, the support was practically useless. Responses were slow, generic, and didn’t address the actual problems we were facing. We spent more time troubleshooting their plugin than running our business. Overall, it feels unreliable and not ready for serious use. I would strongly recommend looking for alternative solutions if you want something stable and professionally supported.

   Read on wp.org ↗
4. ★★★★★ codo68

   6mo ago

   alles super

   Read on wp.org ↗
5. ★★★★★ markfme

   7mo ago

   If you want to sell in Europe you need 3DS2 and to avoid being caught by the UK Employment Rights Act s36 – so you need your vendors to be the Merchant of Record. That means you cannot use Separate Charges and Transfers – because that makes you, the platform, the Merchant of Record.Instead you need to use Stripe’s Direct Charges model.Dokan will not do that.Dokan ‘senior engineers’ will do everything they can to avoid telling you this – which either means they don’t understand their own software, or that they’ve more interested in sales than in helping you.But eventually, if you waste enough of your time and theirs, they will say.Dokan cannot support BOTH direct charges and 3DS2.Which makes it unfit for selling from the UK (unless you want to take a huge regulatory risk!) and much of Europe – and likely other jurisdictions as their rules ‘catch up’. In the context of the Employment Rights Act 2025 (ERA 2025) and its “Section 36” expansion, the choice between Stripe’s payment models is no longer just a technical or financial decision—it is a regulatory one. Section 36 essentially states that if a platform “participates in the arrangements” for labor (services), it can be classified as an Employment Business. Your payment flow is one of the most visible “fingerprints” of that participation. 1. Separate Charges and Transfers (SCT) The “Control” Model In this flow, the customer pays your platform directly. You then “transfer” a portion of that money to the vendor/worker later. How it works: You are the Merchant of Record. The money lands in your Stripe balance first, and you trigger the transfer to the vendor (often via transfer_group). ERA 2025 Risk:HIGH. Indicative of Control: By holding the funds, you are seen as the “paymaster.” Section 36 specifically looks at platforms that handle the financial transaction as evidence of being an employment business. VAT Liability: In many service sectors, this model forces the platform to be the “deemed supplier,” meaning you must account for 20% VAT on the full transaction, not just your commission. This topic was modified 5 months, 1 week ago by markfme.

   Read on wp.org ↗
6. ★★★★★ jubayer911

   8mo ago

   One of the best multivendor plugin…

   Read on wp.org ↗
7. ★★★★★ nayeem067

   9mo ago

   I knew the plugin was made by “We devs“. This is a Bangladeshi developer team. They are working excellently. Proud of you, “We devs“. I encourage “We devs” to develop plugins and update the “dokan” plugin.

   Read on wp.org ↗
8. ★★★★★ agora77

   9mo ago

   I have contacted Mobin several times and I am very satisfied. Mobin was able to answer all my questions clearly and quickly resolve the issues I was facing. He demonstrated great professionalism and real efficiency. Mobin is highly competent, and I highly recommend him.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 0.10 update: Auction and other add-on product types can now appear in the vendor product list and its status counts. update: Refund earnings and commissions are now calculated through a single dedicated calculator, keeping th 0.10
2. — Version 0.9 new: Vendors can now add a product without leaving the product list — a quick-create window collects just the essentials (name, image, price, category, and short description) and saves it as a draft. new: Added a Tools p 0.9
3. — Version 0.8 fix: Cleared the vendor dashboard sale price when the field is blanked so the product reverts to its regular price instead of saving a 0 price. See changelog for all versions . 0.8
4. — Version 0.7 fix: Prevented a DOM-based XSS in the legacy Vue admin by validating the vendor details and reverse-withdrawal route parameters. fix: Enforced per-product ownership on the v3 products batch endpoint so vendors can no lon 0.7
5. — Version 0.6 update: Added wePos and weDocs to the setup wizard’s recommended add-ons and refreshed the add-on descriptions. update: Added weDocs to the admin Extensions page as an installable add-on. fix: Added reCAPTCHA v3 support 0.6
6. — Version 0.11 update: Vendors can now search for products by SKU as well as by name. fix: Store-page buttons now respect the Astra theme’s global button styling. fix: Downloadable files from the new product editor are now saved to Woo 0.11

22 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Unauthenticated Information Exposure ↗
   2026-08-24 CVE-2026-16575 Exposure of Sensitive Information to an Unauthorized Actor Affects < 5.0.14 Patched in 5.0.14
2. Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Missing Authorization ↗
   2026-08-24 CVE-2026-16577 Missing Authorization Affects < 5.0.14 Patched in 5.0.14
3. High · 8.8 Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalation ↗
   2026-08-04 CVE-2026-8761 Missing Authorization Affects <= 5.0.2 Patched in 5.0.3
4. Medium · 4.3 Dokan <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Downloadable Product Access Grant ↗
   2026-08-03 CVE-2026-16574 Authorization Bypass Through User-Controlled Key Affects <= 5.0.10 Patched in 5.0.11
5. Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.10 - Missing Authorization ↗
   2026-07-29 CVE-2026-66699 Missing Authorization Affects <= 5.0.10 Patched in 5.0.11
6. Medium · 4.3 Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Product Attribute Modification ↗
   2026-07-24 CVE-2026-16565 Authorization Bypass Through User-Controlled Key Affects <= 5.0.8 Patched in 5.0.9
7. Medium · 4.3 Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Arbitrary Order Status Modification ↗
   2026-07-24 CVE-2026-16564 Authorization Bypass Through User-Controlled Key Affects <= 5.0.8 Patched in 5.0.9
8. High · 7.2 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.6 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-10 CVE-2026-57706 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.0.6 Patched in 5.0.7
9. Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Information Disclosure via 'id' Parameter ↗
   2026-06-26 CVE-2026-11987 Authorization Bypass Through User-Controlled Key Affects <= 5.0.4 Patched in 5.0.5
10. Medium · 6.4 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Custom+) Stored Cross-Site Scripting via Product SKU ↗
    2026-06-26 CVE-2026-11783 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 5.0.4 Patched in 5.0.5
11. Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification via Multiple AJAX Handlers ↗
    2026-06-17 CVE-2026-10023 Authorization Bypass Through User-Controlled Key Affects <= 5.0.3 Patched in 5.0.4
12. High · 8.8 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.2 - Authenticated (Customer+) Privilege Escalation ↗
    2026-06-03 CVE-2026-49780 Incorrect Privilege Assignment Affects <= 5.0.2 Patched in 5.0.3
13. Medium · 5.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint ↗
    2026-05-01 CVE-2026-3504 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.3.1 Patched in 4.3.2
14. Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Missing Authorization ↗
    2026-03-16 CVE-2026-24359 Missing Authorization Affects <= 4.2.4 Patched in 4.2.5
15. High · 8.1 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure ↗
    2026-01-19 CVE-2025-14977 Improper Access Control Affects <= 4.2.4 Patched in 4.2.5
16. High · 7.2 Dokan <= 4.1.3 - Authenticated (Shop Manager+) Privilege Escalation ↗
    2025-09-20 CVE-2025-53425 Improper Privilege Management Affects <= 4.1.3 Patched in 4.1.4
17. Medium · 6.6 Dokan <=3.7.19 - Authenticated(Shop Manager+) PHP Object Injection via create_dummy_vendor ↗
    2023-06-07 CVE-2023-34382 Deserialization of Untrusted Data Affects < 3.7.20 Patched in 3.7.20
18. High · 7.2 Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection ↗
    2023-03-02 CVE-2023-26525 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.7.12 Patched in 3.7.13
19. Critical · 9.8 Dokan <= 3.7.5 - Unauthenticated SQL Injection ↗
    2022-11-21 CVE-2022-3915 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.7.5 Patched in 3.7.6
20. High · 8.8 Dokan <= 3.6.5 - Cross-Site Request Forgery ↗
    2022-09-28 CVE-2022-3194 Cross-Site Request Forgery (CSRF) Affects <= 3.6.5 Patched in 3.6.6
21. Medium · 5.5 Dokan <= 3.6.3 - Authenticated (Vendor+) Stored Cross-Site Scripting ↗
    2022-09-13 CVE-2022-3194 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.6.3 Patched in 3.6.4
22. Medium · 4.3 Dokan <= 3.0.8 - Cross-Site Request Forgery Bypass ↗
    2020-09-16 CVE-2020-36748 Cross-Site Request Forgery (CSRF) Affects < 3.0.9 Patched in 3.0.9

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 43 languages, 1 at 90% or more

Plus 19 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-24 40K+ → 30K+ down after 236 days in tier
2. 2025-11-30 50K+ → 40K+ down after 612 days in tier
3. 2024-03-28 60K+ → 50K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Superstore — installs · 3.6★ · 4 shared tags D
• MultiVendorX – WooCommerce Multivendor Marketplace AI Powered Solutions 2K+ installs · 4.8★ · 3 shared tags A
• WCFM – Frontend Manager for WooCommerce 20K+ installs · 4.4★ · 2 shared tags A
• WCFM Membership – WooCommerce Memberships for Multivendor Marketplace 10K+ installs · 3.9★ · 2 shared tags B
• WCFM Marketplace – Multivendor Marketplace for WooCommerce 10K+ installs · 4.6★ · 2 shared tags A
• WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors 3K+ installs · 4.5★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy into a readme, a review or a deck. It updates itself.

Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy: 30K+ active installs, 4.6★ (767 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/dokan-lite