What’s Vulnerable › Products

pluck-cms Pluck CMS vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your pluck-cms Pluck CMS version is affected

Latest pluck-cms Pluck CMS vulnerabilities

• CVE-2026-70376 — Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCE (CVSS 9.6)
• CVE-2026-54416 — Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist (CVSS 7.2)