Vulnerabilities

TI-2025-19274 CVE-2025-26260 · GHSA-mj4v-hp69-27x5

Plenti <= 0.7.16 is vulnerable to code execution.

HIGH 73

Plenti <= 0.7.16 is vulnerable to code execution.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0076 Published 2025-03-12 Fixed in 0.7.17 CWE-94

TI-2024-32966 CVE-2024-49381 · GHSA-6h8w-hrfp-pffx

MEDIUM 41

Plenti, a static site generator, has an arbitrary file deletion vulnerability in versions prior to 0.7.2.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00757 Published 2024-10-25 Fixed in 0.7.2 CWE-74

TI-2024-32965 CVE-2024-49380 · GHSA-2p96-p7qh-4rgr

HIGH 80

Plenti, a static site generator, has an arbitrary file write vulnerability in versions prior to 0.7.2.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.02705 Published 2024-10-25 Fixed in 0.7.2 CWE-74