Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy

Older reviews are full of praise for the marketplace features and fast support, while the newest ones report the 5.0 update breaking live sites, plugin conflicts, and weeks of support that doesn't resolve anything.

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

466 searches this plugin appeared in over the last 90 days, 20 listed. 385 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 3 months ago; a band this size takes about a year or more to cross, which places it about 73% of the way through.

1. ★★★★★ mhdshb02

   4mo ago

   Dokan is an exceptional WordPress plugin that truly transforms the way we approach multi-vendor e-commerce. With its user-friendly interface and comprehensive features, it empowers both vendors and site owners to create a seamless online marketplace. The setup process is straightforward, making it accessible even for those who may not be tech-savvy. The plugin offers a plethora of customization options, allowing vendors to manage their stores effortlessly. From product listings to order management, every aspect is well thought out and easy to navigate. The support team is also commendable, providing timely assistance and guidance whenever needed. One area for improvement would be the implementation of a robust RTL (Right-to-Left) specification. This enhancement would significantly benefit users who operate in languages that read from right to left, ensuring a more inclusive experience for all vendors and customers. Overall, I wholeheartedly give Dokan a five-star rating! It’s a powerful tool that has made my e-commerce journey enjoyable and successful. Highly recommended for anyone looking to build a thriving online marketplace!

   Read on wp.org ↗
2. ★★★★★ KOUKI

   5mo ago

   We have been using Dokan for around six years, so it is genuinely disappointing to be writing this review. The Dokan 5.0 update impacted our live site considerably and left Dokan Pro/Starter effectively unusable on our live marketplace. Starter has been switched off since 1 May, and we are now seven weeks later with no meaningful resolution. Over this period, support has not provided the level of actionable assistance we would expect from a platform we have supported and paid for over many years. Instead, we have often felt that the issues were being shifted to other plugins, our theme, hosting, or other external factors, rather than Dokan taking real ownership of the problem. We have made significant changes to our site over the past several months in an effort to keep working with Dokan, including changing our theme, changing pricing plugins, and changing feed generation plugins. These were major changes for a live marketplace and came with real disruption, cost, and lost time. What is most disappointing is that after six years as a customer, Dokan appears comfortable seeing us leave without a proper resolution, meaningful escalation, or even a refund for the current subscription period, despite the product being unusable for us since 1 May. This review is not written lightly. We have invested years into using Dokan and genuinely wanted the platform to work for our business. However, the lack of urgency, ownership, and fair support during this issue has been extremely disappointing. I hope Dokan takes this feedback seriously and improves how it supports long-standing customers when major updates cause serious disruption.

   Read on wp.org ↗
3. ★★★★★ miata2

   7mo ago

   We had a very disappointing experience with the Dokan Vendor plugin. It is extremely buggy and caused multiple issues across our website, including layout breaks and conflicts with other essential plugins. Instead of improving our marketplace, it created constant technical headaches and instability. Even worse, the support was practically useless. Responses were slow, generic, and didn’t address the actual problems we were facing. We spent more time troubleshooting their plugin than running our business. Overall, it feels unreliable and not ready for serious use. I would strongly recommend looking for alternative solutions if you want something stable and professionally supported.

   Read on wp.org ↗
4. ★★★★★ codo68

   8mo ago

   alles super

   Read on wp.org ↗
5. ★★★★★ markfme

   9mo ago

   If you want to sell in Europe you need 3DS2 and to avoid being caught by the UK Employment Rights Act s36 – so you need your vendors to be the Merchant of Record. That means you cannot use Separate Charges and Transfers – because that makes you, the platform, the Merchant of Record.Instead you need to use Stripe’s Direct Charges model.Dokan will not do that.Dokan ‘senior engineers’ will do everything they can to avoid telling you this – which either means they don’t understand their own software, or that they’ve more interested in sales than in helping you.But eventually, if you waste enough of your time and theirs, they will say.Dokan cannot support BOTH direct charges and 3DS2.Which makes it unfit for selling from the UK (unless you want to take a huge regulatory risk!) and much of Europe – and likely other jurisdictions as their rules ‘catch up’. In the context of the Employment Rights Act 2025 (ERA 2025) and its “Section 36” expansion, the choice between Stripe’s payment models is no longer just a technical or financial decision—it is a regulatory one. Section 36 essentially states that if a platform “participates in the arrangements” for labor (services), it can be classified as an Employment Business. Your payment flow is one of the most visible “fingerprints” of that participation. 1. Separate Charges and Transfers (SCT) The “Control” Model In this flow, the customer pays your platform directly. You then “transfer” a portion of that money to the vendor/worker later. How it works: You are the Merchant of Record. The money lands in your Stripe balance first, and you trigger the transfer to the vendor (often via transfer_group). ERA 2025 Risk:HIGH. Indicative of Control: By holding the funds, you are seen as the “paymaster.” Section 36 specifically looks at platforms that handle the financial transaction as evidence of being an employment business. VAT Liability: In many service sectors, this model forces the platform to be the “deemed supplier,” meaning you must account for 20% VAT on the full transaction, not just your commission. This topic was modified 5 months, 1 week ago by markfme.

   Read on wp.org ↗
6. ★★★★★ jubayer911

   11mo ago

   One of the best multivendor plugin…

   Read on wp.org ↗
7. ★★★★★ nayeem067

   11mo ago

   I knew the plugin was made by “We devs“. This is a Bangladeshi developer team. They are working excellently. Proud of you, “We devs“. I encourage “We devs” to develop plugins and update the “dokan” plugin.

   Read on wp.org ↗
8. ★★★★★ agora77

   11mo ago

   I have contacted Mobin several times and I am very satisfied. Mobin was able to answer all my questions clearly and quickly resolve the issues I was facing. He demonstrated great professionalism and real efficiency. Mobin is highly competent, and I highly recommend him.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 0.10 update: Auction and other add-on product types can now appear in the vendor product list and its status counts. update: Refund earnings and commissions are now calculated through a single dedicated calculator, keeping th 0.10
2. — Version 0.9 new: Vendors can now add a product without leaving the product list — a quick-create window collects just the essentials (name, image, price, category, and short description) and saves it as a draft. new: Added a Tools p 0.9
3. — Version 0.8 fix: Cleared the vendor dashboard sale price when the field is blanked so the product reverts to its regular price instead of saving a 0 price. See changelog for all versions . 0.8
4. — Version 0.7 fix: Prevented a DOM-based XSS in the legacy Vue admin by validating the vendor details and reverse-withdrawal route parameters. fix: Enforced per-product ownership on the v3 products batch endpoint so vendors can no lon 0.7
5. — Version 0.6 update: Added wePos and weDocs to the setup wizard’s recommended add-ons and refreshed the add-on descriptions. update: Added weDocs to the admin Extensions page as an installable add-on. fix: Added reCAPTCHA v3 support 0.6
6. — Version 0.11 update: Vendors can now search for products by SKU as well as by name. fix: Store-page buttons now respect the Astra theme’s global button styling. fix: Downloadable files from the new product editor are now saved to Woo 0.11

All 25 disclosed vulnerabilities are patched in the current version (5.3.3). Sites still on an older version should update.

1. Patched Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.2.1 - Insecure Direct Object Reference to Authenticated (Custom+) Limited Account Takeover via 'password' Parameter to /wp-json/dokan/v1/customers/{id} ↗
   2026-10-15 CVE-2026-89280 Authorization Bypass Through User-Controlled Key Affects <= 5.2.1 Patched in 5.3.0
2. Patched Medium · 4.3 Dokan <= 5.1.0 - Authenticated (Vendor+) Information Exposure ↗
   2026-10-09 CVE-2026-107694 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 5.1.0 Patched in 5.2.0
3. Patched High · 7.2 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Authenticated (Shop Manager+) Remote Code Execution ↗
   2026-08-28 CVE-2026-16576 Improper Control of Generation of Code Affects < 5.0.14 Patched in 5.0.14
4. Patched Medium · 5.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Unauthenticated Information Exposure ↗
   2026-08-24 CVE-2026-16575 Exposure of Sensitive Information to an Unauthorized Actor Affects < 5.0.14 Patched in 5.0.14
5. Patched Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy < 5.0.14 - Missing Authorization ↗
   2026-08-24 CVE-2026-16577 Missing Authorization Affects < 5.0.14 Patched in 5.0.14
6. Patched High · 8.8 Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege Escalation ↗
   2026-08-04 CVE-2026-8761 Missing Authorization Affects <= 5.0.2 Patched in 5.0.3
7. Patched Medium · 4.3 Dokan <= 5.0.10 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Downloadable Product Access Grant ↗
   2026-08-03 CVE-2026-16574 Authorization Bypass Through User-Controlled Key Affects <= 5.0.10 Patched in 5.0.11
8. Patched Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.10 - Missing Authorization ↗
   2026-07-29 CVE-2026-66699 Missing Authorization Affects <= 5.0.10 Patched in 5.0.11
9. Patched Medium · 4.3 Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Cross-Vendor Product Attribute Modification ↗
   2026-07-24 CVE-2026-16565 Authorization Bypass Through User-Controlled Key Affects <= 5.0.8 Patched in 5.0.9
10. Patched Medium · 4.3 Dokan <= 5.0.8 - Insecure Direct Object Reference to Authenticated (Vendor+) Arbitrary Order Status Modification ↗
    2026-07-24 CVE-2026-16564 Authorization Bypass Through User-Controlled Key Affects <= 5.0.8 Patched in 5.0.9
11. Patched High · 7.2 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.6 - Unauthenticated Stored Cross-Site Scripting ↗
    2026-07-10 CVE-2026-57706 Improper Neutralization of Input During Web Page Generation Affects <= 5.0.6 Patched in 5.0.7
12. Patched Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Subscriber+) Insecure Direct Object Reference to Information Disclosure via 'id' Parameter ↗
    2026-06-26 CVE-2026-11987 Authorization Bypass Through User-Controlled Key Affects <= 5.0.4 Patched in 5.0.5
13. Patched Medium · 6.4 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.4 - Authenticated (Custom+) Stored Cross-Site Scripting via Product SKU ↗
    2026-06-26 CVE-2026-11783 Improper Neutralization of Input During Web Page Generation Affects <= 5.0.4 Patched in 5.0.5
14. Patched Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 5.0.3 - Insecure Direct Object Reference to Authenticated (Custom+) Arbitrary Order Modification via Multiple AJAX Handlers ↗
    2026-06-17 CVE-2026-10023 Authorization Bypass Through User-Controlled Key Affects <= 5.0.3 Patched in 5.0.4
15. Patched High · 8.8 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 5.0.2 - Authenticated (Customer+) Privilege Escalation ↗
    2026-06-03 CVE-2026-49780 Incorrect Privilege Assignment Affects <= 5.0.2 Patched in 5.0.3
16. Patched Medium · 5.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution <= 4.3.1 - Unauthenticated Information Disclosure in Store Reviews REST API Endpoint ↗
    2026-05-01 CVE-2026-3504 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.3.1 Patched in 4.3.2
17. Patched Medium · 4.3 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Missing Authorization ↗
    2026-03-16 CVE-2026-24359 Missing Authorization Affects <= 4.2.4 Patched in 4.2.5
18. Patched High · 8.1 Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy <= 4.2.4 - Insecure Direct Object Reference to PayPal Account Takeover and Sensitive Information Disclosure ↗
    2026-01-19 CVE-2025-14977 Improper Access Control Affects <= 4.2.4 Patched in 4.2.5
19. Patched High · 7.2 Dokan <= 4.1.3 - Authenticated (Shop Manager+) Privilege Escalation ↗
    2025-09-20 CVE-2025-53425 Improper Privilege Management Affects <= 4.1.3 Patched in 4.1.4
20. Patched Medium · 6.6 Dokan <=3.7.19 - Authenticated(Shop Manager+) PHP Object Injection via create_dummy_vendor ↗
    2023-06-07 CVE-2023-34382 Deserialization of Untrusted Data Affects < 3.7.20 Patched in 3.7.20
21. Patched High · 7.2 Dokan <= 3.7.12 - Authenticated (Vendor+) SQL Injection ↗
    2023-03-02 CVE-2023-26525 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.7.12 Patched in 3.7.13
22. Patched Critical · 9.8 Dokan <= 3.7.5 - Unauthenticated SQL Injection ↗
    2022-11-21 CVE-2022-3915 Improper Neutralization of Special Elements used in an SQL Command Affects <= 3.7.5 Patched in 3.7.6
23. Patched High · 8.8 Dokan <= 3.6.5 - Cross-Site Request Forgery ↗
    2022-09-28 CVE-2022-3194 Cross-Site Request Forgery Affects <= 3.6.5 Patched in 3.6.6
24. Patched Medium · 5.5 Dokan <= 3.6.3 - Authenticated (Vendor+) Stored Cross-Site Scripting ↗
    2022-09-13 CVE-2022-3194 Improper Neutralization of Input During Web Page Generation Affects <= 3.6.3 Patched in 3.6.4
25. Patched Medium · 4.3 Dokan <= 3.0.8 - Cross-Site Request Forgery Bypass ↗
    2020-09-16 CVE-2020-36748 Cross-Site Request Forgery Affects < 3.0.9 Patched in 3.0.9

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 43 languages, 1 at 90% or more

Plus 19 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-07-24 40K+ → 30K+ down after 236 days in tier
2. 2025-11-30 50K+ → 40K+ down after 612 days in tier
3. 2024-03-28 60K+ → 50K+ down after 561 days in tier
4. 2022-09-14 70K+ → 60K+ down after 362 days in tier
5. 2021-09-17 60K+ → 70K+ up after 216 days in tier
6. 2021-02-13 50K+ → 60K+ up after 93 days in tier
7. 2020-11-12 40K+ → 50K+ up after 195 days in tier
8. 2020-05-01 30K+ → 40K+ up after 103 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy into a readme, a review or a deck. It updates itself.

Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy: 30K+ active installs, 4.6★ (769 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/dokan-lite