CVE-2022-26965

In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution

published March 18, 2022

CVSS
—
EPSS
36%
Percentile
98.5
In the wild
Unconfirmed
What it is

In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.36257 · 98.5th percentile
Published
2022-03-18T06:33Z
EPSS history
Timeline
  • 18 MAR 06:33Z
    In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution
    cvelistv5