CVE-2020-21564: Pluck-CMS Pluck

High severity, CVSS 8.8. EPSS: 3.5% chance of exploitation in the next 30 days.

An issue was discovered in Pluck CMS 4.7.10-dev2 and 4.7.11. There is a file upload vulnerability that can cause a remote command execution via admin.php?action=files.

Affected products

• Pluck-CMS Pluck: version 4.7.10 only; version 4.7.11 only

Published 2020-09-30. Last modified 2026-06-17.