Sploitus

23 exploited vulnerabilities in Pluck Cms

Vulnerabilities with publicly known exploits

Vendors
Pluck Cms, Pluck
With known exploits
23
Affected Pluck-cms Pluck versions
= 4.7.18, 4.7.20, 4.7.10, 4.7.13
Affected Pluck versions
= 4.5.2

Vulnerabilities with exploits

Highest CVSS first — 5 of these already have exploit code on Sploitus

CVE-2024-43042
CVSS 9.8 CRITICAL 2024-08-16FIX AVAILABLE
CVE-2020-20718
CVSS 9.8 CRITICAL 2023-06-20
CVE-2023-50564 10 exploits
CVSS 8.8 HIGH 2023-12-14
Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms PluckExploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck
CVE-2022-27432
CVSS 8.8 HIGH 2022-03-29
CVE-2020-18198
CVSS 8.8 HIGH 2021-05-17
CVE-2020-18195
CVSS 8.8 HIGH 2021-05-17
CVE-2020-21564
CVSS 8.8 HIGH 2020-09-30
CVE-2014-8708
CVSS 7.5 HIGH 2017-03-17
CVE-2025-46099 1 exploit
CVSS 7.2 HIGH 2025-07-19FIX AVAILABLE
Exploit for CVE-2025-46099
CVE-2023-27083
CVSS 7.2 HIGH 2023-06-22FIX AVAILABLE
CVE-2023-25828
CVSS 7.2 HIGH 2023-03-27
CVE-2020-20969 3 exploits
CVSS 7.2 HIGH 2023-06-20
📄 PluckCMS 4.7.10 Shell UploadPluckCMS 4.7.10 - Unrestricted File Upload
CVE-2020-20919
CVSS 7.2 HIGH 2023-06-20FIX AVAILABLE
CVE-2020-20918
CVSS 7.2 HIGH 2023-06-20
CVE-2020-29607 5 exploits
CVSS 7.2 HIGH 2020-12-16FIX AVAILABLE
Exploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms PluckExploit for Unrestricted Upload of File with Dangerous Type in Pluck-Cms Pluck
CVE-2022-26589
CVSS 6.5 MEDIUM 2022-04-12
CVE-2026-31205
CVSS 5.7 MEDIUM 2026-05-04FIX AVAILABLE
CVE-2014-8706
CVSS 5.0 MEDIUM 2017-03-17FIX AVAILABLE
CVE-2008-3851 1 exploit
CVSS 5.0 MEDIUM 2008-08-27FIX AVAILABLE
Pluck CMS 4.5.2 - Multiple Local File Inclusions
CVE-2023-27082
CVSS 4.8 MEDIUM 2023-06-26
CVE-2014-8707
CVSS 4.0 MEDIUM 2017-03-17FIX AVAILABLE
CVE-2026-16205
CVSS 3.3 LOW 2026-07-19FIX AVAILABLE
CVE-2023-5013
CVSS 2.6 LOW 2023-09-16FIX AVAILABLE