pluck-cms Pluck CMS vulnerabilities

2 published CVEs name pluck-cms Pluck CMS among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 2
Critical: 1
Known exploited: 0

Critical 1High 1Medium 0Low 0Not scored 0

Newest CVEs

CVE-2026-70376
Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCE
pluck-cms · Pluck CMS
Critical9.6
CVE-2026-54416
Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist
pluck-cms · Pluck CMS
High7.2

Most common weaknesses