Advisories · Technology
dplugins DevKit Pro.
Every CVE that names dplugins DevKit Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flow
- dplugins DevKit Pro
- Authentication bypass
- CVSS 8.8 High
DevKit Pro <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Installation / Remote Code Execution via 'qqfile' Parameter
- dplugins DevKit Pro
- Broken access control