Skip to content
OpenAdvisories

Vendor

Pluck

3 known vulnerabilities.

Products

CMS 2 pluck-cms 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2023-25828

    Authenticate Remote Code Execution in Pluck CMS

    Pluck CMS is vulnerable to an authenticated remote code execution (RCE) vulnerability through its “albums” module. Albums are used to create collections of images that can be inserted into web pages across the site. Albums allow the upload of various filetype…

    Pluck pluck-cms