pluck-cms vulnerabilities
3 published CVEs name pluck-cms among the affected products.
- Published CVEs
- 3
- Last 12 months
- 2
- Critical
- 2
- Known exploited
- 0
Critical 2High 1Medium 0Low 0Not scored 0
CVEs per yearBy the year they were published
- 20191
- 20262
Newest CVEs
- CVE-2026-70376
Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCE
pluck-cms · Pluck CMS
Critical9.6 - CVE-2026-54416
Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist
pluck-cms · Pluck CMS
High7.2 - CVE-2019-1010062
PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The component is:…
pluck-cms · PluckCMS
Critical9.8