Known Vulnerabilities for Pluck by Pluck-cms
Listed below are 10 of the newest known vulnerabilities associated with "Pluck" by "Pluck-cms".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-31205 json | Cross Site Scripting vulnerability in Pluck CMS before v.4.7.21dev allows a remote attacker to escalate privileges via the ed... | Not Provided | 2026-05-04 | 2026-05-04 |
| CVE-2026-16205 json | A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function htmlspecialchars_decode of ... | Not Provided | 2026-07-19 | 2026-07-20 |
| CVE-2025-46099 json | In Pluck CMS 4.7.20-dev, an authenticated attacker can upload or create a crafted PHP file under the albums module directory ... | Not Provided | 2025-07-23 | 2026-07-05 |
| CVE-2023-27083 json | An issue discovered in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev5 allows remote attackers to run arbitrary code via m... | 7.2 - HIGH | 2023-06-22 | 2023-11-07 |
| CVE-2023-27082 json | Cross Site Scripting (XSS) vulnerability in /admin.php in Pluck CMS 4.7.15 through 4.7.16-dev4 allows remote attackers to run... | 4.8 - MEDIUM | 2023-06-26 | 2023-11-07 |
| CVE-2023-25828 json | Pluck CMS is vulnerable to an authenticated remote code execution (RCE) vulnerability through its “albums” module. Albums... | 7.2 - HIGH | 2023-03-27 | 2023-11-07 |
| CVE-2023-5013 json | A vulnerability has been found in Pluck CMS 4.7.18 and classified as problematic. This vulnerability affects unknown code of ... | 5.4 - MEDIUM | 2023-09-16 | 2023-11-07 |
| CVE-2022-27432 json | A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploit... | 8.8 - HIGH | 2022-03-30 | 2022-04-05 |
| CVE-2022-26965 json | In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote cod... | 7.2 - HIGH | 2022-03-18 | 2022-03-25 |
| CVE-2022-26589 json | A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages. | 6.5 - MEDIUM | 2022-04-13 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Pluck-cms | Pluck | 4.744 | |||
| Application | Pluck-cms | Pluck | 4.743 | |||
| Application | Pluck-cms | Pluck | 4.74 | |||
| Application | Pluck-cms | Pluck | 4.7.9 | |||
| Application | Pluck-cms | Pluck | 4.7.8 | |||
| Application | Pluck-cms | Pluck | 4.7.7 | |||
| Application | Pluck-cms | Pluck | 4.7.6 | |||
| Application | Pluck-cms | Pluck | 4.7.5 | |||
| Application | Pluck-cms | Pluck | 4.7.4 | |||
| Application | Pluck-cms | Pluck | 4.7.3 | |||
| Application | Pluck-cms | Pluck | 4.7.2 | |||
| Application | Pluck-cms | Pluck | 4.7.13 | |||
| Application | Pluck-cms | Pluck | 4.7.11 | |||
| Application | Pluck-cms | Pluck | 4.7 | |||
| Application | Pluck-cms | Pluck | 4.6.2 | |||
| Application | Pluck-cms | Pluck | 4.6.1 | |||
| Application | Pluck-cms | Pluck | 4.5.3 | |||
| Application | Pluck-cms | Pluck | 4.5.2 | |||
| Application | Pluck-cms | Pluck | 4.5.1 | |||
| Application | Pluck-cms | Pluck | 4.3 |