Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Pluck-cms
Pluck Cms
Pluck-cms Pluck Cms vulnerabilities
pluck cms
cms
,
pluck-cms
pluck cms
+1 more
Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and RCE
CVE-2026-70376
Public exploit
9.6
Critical
August 5, 2026
pluck cms
cms
,
pluck-cms
pluck cms
+1 more
Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Blacklist
CVE-2026-54416
7.2
High
August 5, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open