{"id":"CVE-2026-70376","published":"2026-08-05T08:16:41.703","lastModified":"2026-08-10T12:17:23.317","description":"Pluck CMS's admin panel relies solely on a Referer-header comparison (requestedByTheSameDomain in data/inc/functions.admin.php, gating every admin.php action) for CSRF protection, with no per-request anti-CSRF token anywhere in the admin area.","cvssScore":9.6,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","cwes":["CWE-352"],"vendors":[],"products":[],"references":[{"url":"https://github.com/pluck-cms/pluck","tags":[]}],"exploitRefs":[{"url":"https://github.com/pluck-cms/pluck","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows attackers to perform CSRF attacks by manipulating the Referer header, bypassing admin panel protections.","exploitability":"Exploitation is relatively easy if an attacker can control the user's session and manipulate the Referer header.","blast_radius":"If exploited, it could lead to full compromise of the admin area, including data theft or unauthorized actions.","remediation":"Implement per-request anti-CSRF tokens in the admin panel to replace the reliance on Referer headers.","tags":["csrf","admin","web","security"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-08-11T06:43:56.728Z"}}