Advisories · Technology

Pluck CMS.

Every CVE that names Pluck CMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-16205 CVE record

CVSS 4.8 Medium

Pluck CMS Albums albums.admin.php htmlspecialchars_decode cross site scripting
- Pluck CMS
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 19 Jul 2026
CVE-2024-9405 CVE record

CVSS 5.3 Medium

Path traversal in Pluck CMS
- Pluck CMS
- Path traversal
Not analysed yet 1 Oct 2024
CVE-2023-5013 CVE record

CVSS 2.6 Low

Pluck CMS Installation install.php cross site scripting
- Pluck CMS
- Cross-site scripting (XSS)
Not analysed yet 16 Sept 2023
CVE-2023-25828 CVE record

CVSS 7.2 High

Authenticate Remote Code Execution in Pluck CMS
- pluck-cms
- Unrestricted file upload
Not analysed yet 27 Mar 2023