Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.

Published Aug 16, 2024 · Updated Mar 19, 2025 · Assigned by mitre