Pluck vulnerabilities
We track 1 vulnerability in Pluck products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 27, 2023.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest Pluck vulnerabilities
- 7.2 High severity
pluck-cms: Unrestricted Upload of File with Dangerous Type
Pluck CMS is vulnerable to an authenticated remote code execution (RCE) vulnerability through its “albums” module. Albums are used to create collections of images that can be inserted into web pages across the site. Albums allow the upload of various filetypes