Skip to content

Product

pluck-cms vulnerabilities

1 published CVE affecting pluck-cms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest pluck-cms CVEs

Newest publication first

  1. CVE-2023-25828 Authenticate Remote Code Execution in Pluck CMS

    Published
    HighCVSS 7.2 EPSS 1.6%

    Pluck CMS is vulnerable to an authenticated remote code execution (RCE) vulnerability through its “albums” module. Albums are used to create collections of images that can be inserted into web pages across the site. Albums allow the upload of various filetypes, which undergo a no...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.