dplugins
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| DevKit Pro | 2 | – | Oct 2, 2026 |
Exploited and recent CVEs
- CVE-2026-14378 DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow 0.7%
- CVE-2026-14357 DevKit Pro <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Installation / Remote Code Execution via 'qqfile' Parameter 0.7%