All 3 CVE vulnerabilities found in Pluck CMS, with AI-generated Chinese analysis, references, and POCs.
Vendor: Pluck CMS
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-70376 | Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCE CWE-352 | 9.6 | Critical | 2026-08-05 |
| CVE-2026-54416 | Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist CWE-434 | 7.2 | High | 2026-08-05 |
| CVE-2024-9405 | Pluck 安全漏洞 CWE-23 | 5.3 | Medium | 2024-10-01 |
All 3 known CVE vulnerabilities affecting Pluck CMS with full Chinese analysis, references, and POCs where available.