CVE-2012-1227

no score yetEPSS 0.6%

Multiple cross-site request forgery (CSRF) vulnerabilities in admin.php in pluck 4.7 allow remote attackers to hijack the authentication of admins for requests that (1) modify the admin email address or (2) modify the blog title via a settings action; (3) add a page via an editpage action, or (4) add a categorie via the blog module.

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 50% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2012-02-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

pluck-cms:pluck

References

http://osvdb.org/79005
http://secunia.com/advisories/47934
http://www.exploit-db.com/exploits/18474
http://osvdb.org/79005
http://secunia.com/advisories/47934

Check your stack JSON