CVE-2022-26965

HIGH CVSS: 7.2 Published: 2022-03-18 Modified: 2026-06-17

Description

In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution.

Affected Platforms

Pluck-Cms Pluck

Weakness Type

CWE-434

References