VendorsUseplunkplunkall versions
Vulnerabilities

Useplunk Plunk

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-32096
Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns
Published 2026-03-11 · Analyzed
9.3EPSS 0.004
CVE-2026-34975
Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers
Published 2026-04-06 · Analyzed
8.5EPSS 0.003
CVE-2026-32095
Plunk has Stored Cross-Site Scripting (XSS) via SVG File Upload
Published 2026-03-11 · Analyzed
5.4EPSS 0.002