doramart DoraCMS

• CVE-2026-120448 High 8.1 DoraCMS through 3.1.0 Mass Assignment via API Key Update Endpoint 0.4%
• CVE-2026-3795 Medium 6.3 doramart DoraCMS v1.js createFileBypath path traversal 0.7%
• CVE-2026-3794 High 7.3 doramart DoraCMS Email API send improper authentication 0.7%
• CVE-2026-25870 Medium 5.8 DoraCMS <= 3.1 UEditor Remote Image Fetch SSRF 0.3%