CVE-2018-16634

Pluck v4.7.7 allows CSRF via admin.php?action=settings...

PT-2018-13661

Name of the Vulnerable Software and Affected Versions Pluck version 4.7.7 Description The issue allows for CSRF via the admin.php?action=settings endpoint. This can potentially be exploited by tricking an administrator into performing unintended actions. Recommendations For Pluck version 4.7.7,...

CVE-2018-16634: Cross-Site Request Forgery (CSRF)

Pluck v4.7.7 allows CSRF via admin.php?action=settings...