← All advisories

Critical severity9.8NVD Advisory· Published Aug 16, 2024· Updated Jun 17, 2026

CVE-2024-43042

CVE-2024-43042

Description

Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Pluck/Pluck2 versions
cpe:2.3:a:pluck-cms:pluck:4.7.18:-:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pluck-cms:pluck:4.7.18:-:*:*:*:*:*:*
- (no CPE)range: <4.7.18
Pluck/CMSdescription

Patches

Vulnerability mechanics

References

1

drive.google.com/file/d/1FnLCFP8xDrE1e_4Ft_TZ7VhC-JBkpsL0/viewnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.