critical9.8
CVE-2024-43042
Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.
Impact
Pluck CMS 4.7.18 does not restrict failed login attempts, allowing attackers to execute a brute force attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pluck-Cms | Pluck | Version 4.7.18 |