CVE
When a Website Trusts Its Own Filing System a Little Too Much (CVE-2026-52657)
TL;DR Pluck CMS 4.7.20 writes plugin-supplied data into a live PHP file - but it trusts the name of that data, not just its value. A malicious
Topic
Common Vulnerabilities and Exposures (CVE). This category tracks publicly known software flaws assigned a unique CVE identifier. In penetration testing, it maps discovered system weaknesses to standardized IDs to help teams quickly identify risks, verify exploits, and apply the correct security patches.
1 article
TL;DR Pluck CMS 4.7.20 writes plugin-supplied data into a live PHP file - but it trusts the name of that data, not just its value. A malicious