Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

useplunk vulnerabilities

5 published CVEs name useplunk among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-42192

    Plunk: Stored XSS in campaign view

    useplunk · plunk

    Medium5.4
  • CVE-2026-42193

    Plunk: SNS webhook forgery

    useplunk · plunk

    Critical9.1
  • CVE-2026-34975

    Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers

    useplunk · plunk

    High8.5
  • CVE-2026-32096

    Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns

    useplunk · plunk

    Critical9.3
  • CVE-2026-32095

    Plunk has Stored Cross-Site Scripting (XSS) via SVG File Upload

    useplunk · plunk

    Medium5.4
All 5 in the list