Pluck-cms Pluck 4.7.15
Approved changes feed: RSS · Atom
cpe:2.3:a:pluck-cms:pluck:4.7.15:-:*:*:*:*:*:*part: a version: 4.7.15 update: -
| Vendor | Pluck Cms (79818d9e-3bb6-5d0c-b0a3-8aaffb20024d) |
|---|---|
| Product | Pluck (4e081014-454c-55c8-a654-77e6221e09f3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/pluck-cms/pluck |
purl2cpe | 2026-06-01 10:15:56.527451 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-27432 |
vulnerable | 2026-06-08 05:41:55.215287 |
Details available
A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to change the password of any given user by exploiting this feature leading to account takeover.
Published: 2022-03-29T23:24:46.000Z
Updated: 2024-08-03T05:25:32.686Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-26589 |
vulnerable | 2026-06-08 05:41:52.519251 |
Details available
A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages.
Published: 2022-04-12T23:32:09.000Z
Updated: 2024-08-03T05:03:32.981Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31747 |
vulnerable | 2026-06-08 05:31:53.871999 |
Details available
Missing SSL Certificate Validation issue exists in Pluck 4.7.15 in update_applet.php, which could lead to man-in-the-middle attacks.
Published: 2021-12-10T18:04:28.000Z
Updated: 2024-08-03T23:03:33.852Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31746 |
vulnerable | 2026-06-08 05:31:53.871693 |
Details available
Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory traversal and potentially arbitrary code execution.
Published: 2021-12-10T17:45:34.000Z
Updated: 2024-08-03T23:03:33.746Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-31745 |
vulnerable | 2026-06-08 05:31:53.871310 |
Details available
Session Fixation vulnerability in login.php in Pluck-CMS Pluck 4.7.15 allows an attacker to sustain unauthorized access to the platform. Because Pluck does not invalidate prior sessions after a password change, access can be sustained even after an administrator performs regular remediation attempts such as resetting their password.
Published: 2021-12-10T17:40:21.000Z
Updated: 2024-08-03T23:03:33.786Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-27984 |
vulnerable | 2026-06-08 05:31:22.815372 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.