What’s Vulnerable › Products

useplunk plunk vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your useplunk plunk version is affected

Latest useplunk plunk vulnerabilities

• CVE-2026-42193 — Plunk: SNS webhook forgery (CVSS 9.1)
• CVE-2026-42192 — Plunk: Stored XSS in campaign view (CVSS 5.4)
• CVE-2026-34975 — Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers (CVSS 4.3)
• CVE-2026-32096 — Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns (CVSS 8.6)
• CVE-2026-32095 — Plunk has Stored Cross-Site Scripting (XSS) via SVG File Upload (CVSS 5.4)