agentprime: dplugins-devkit-proEvery new CVE for dplugins-devkit-pro.https://agentprime.io/CVE-2026-14378: DevKit Pro <= 2.3.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via 'original_user_id' Cookie in Frontend Revert Switch Flowhttps://agentprime.io/advisories/CVE-2026-14378/https://agentprime.io/advisories/CVE-2026-14378/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 02 Oct 2026 03:38:46 GMTCVEcriticalCVE-2026-14357: DevKit Pro <= 2.3.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Theme Installation / Remote Code Execution via 'qqfile' Parameterhttps://agentprime.io/advisories/CVE-2026-14357/https://agentprime.io/advisories/CVE-2026-14357/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 02 Sep 2026 05:29:51 GMTCVE