← All advisories

Medium severity6.5NVD Advisory· Published Apr 13, 2022· Updated Jun 17, 2026

CVE-2022-26589

CVE-2022-26589

Description

A Cross-Site Request Forgery (CSRF) in Pluck CMS v4.7.15 allows attackers to delete arbitrary pages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Pluck/CMSdescription
Pluck/Pluck2 versions
cpe:2.3:a:pluck-cms:pluck:4.7.15:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pluck-cms:pluck:4.7.15:-:*:*:*:*:*:*
- (no CPE)range: =4.7.15

Patches

Vulnerability mechanics

References

2

owasp.org/www-community/attacks/csrfnvdThird Party Advisory
medium.com/%40devansh3008/pluck-cms-v4-7-15-csrf-vulnerability-at-delete-page-9fff0309f9cnvd

News mentions

0

No linked articles in our index yet.