pluck-cms vulnerabilities
3 published CVEs name pluck-cms among the affected products.
- 3Published CVEs3 of them scored
- 2Last 12 monthspublished in the last year
- 2Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-70376
Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCE
pluck-cms · Pluck CMS
Critical9.6 - CVE-2026-54416
Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist
pluck-cms · Pluck CMS
High7.2 - CVE-2019-1010062
PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is:…
pluck-cms · PluckCMS
Critical9.8