Dplugins / Devkit Pro

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2026-14378	DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow	CRITICAL	9.8	Oct 2, 2026
CVE-2026-14357	DevKit Pro <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Installation / Remote Code Execution via 'qqfile' Parameter	HIGH	8.8	Sep 2, 2026

Rows per page

Showing 1 to 2 of 2 CVEs