CVE-2026-14378 | CVSS: 9.8 | 严重级别: CRITICAL
The DevKit Pro plugin for WordPress is vulnerable to Authentication Bypass Leading to Administrator Account Takeover in all versions up to, and including, 2.3.0 This is due to the `revert_switch` handler trusting the attacker-controlled `original_user_id` cookie as the privileged identity: `verify_nonce_and_capability()` incorrectly checks the `manage_options` capability on the user identified by the cookie rather than on the actual requester via `current_user_can()`, while the switch-back form and a valid session-bound nonce are emitted publicly via `wp_footer` to any visitor — including unau
参考链接:
• https://docs.dplugins.com/devkit/changelog
• https://www.wordfence.com/threat-intel/vulnerabilities/id/2ab3986a-69e0-442f-8e7
📌 数据来源: NVD 官方