Vulnerabilities in pluck-cms

3 results

CVE-2019-1010062—PluckCMS 4.7.4 and earlier is affected by: CWE-434 Unrestricted Upload of File with Dangerous Type. The impact is: get webshell. The componeEPSS 1.8%CVE-2026-54416HIGHPluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload BlacklistEPSS 0.5%CVE-2026-70376CRITICALPluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCEEPSS 0.2%