Skip to content

Vendor

plentico vulnerabilities

3 published CVES affecting plentico, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
3
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of plentico alerts

Products

Latest plentico CVEs

Newest publication first

  1. CVE-2025-26260 Plenti - Code Injection - Denial of Services

    Published
    HighCVSS 8.8 EPSS 0.76% PoC

    Plenti <= 0.7.16 is vulnerable to code execution. Users uploading '.svelte' files with the /postLocal endpoint can define the file name as javascript codes. The server executes the uploaded file name in host, and cause code execution.

  2. CVE-2024-49381 Plenti arbitrary file deletion vulnerability

    Published
    HighCVSS 7.7 EPSS 0.76%

    Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write deletion when a plenti user serves their website. This issue may lead to information loss. Version 0.7.2 fixe...

  3. CVE-2024-49380 Plenti arbitrary file write vulnerability

    Published
    HighCVSS 8.9 EPSS 2.7%

    Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2. The /postLocal endpoint is vulnerable to an arbitrary file write vulnerability when a plenti user serves their website. This issue may lead to Remote Code Execution. Version 0.7...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.