bunny.net

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

bunny.net records in CISA KEV

No bunny.net vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-30562 CVE-2025-48236 · GHSA-5xjm-gxc3-2jcj

WordPress bunny.net plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability

LOW 37

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bunny.net bunny.net bunnycdn allows Stored XSS.This issue affects bunny.net: from n/a through <= 2.3.0.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00481 Published 2025-05-19 No fix listed CWE-79

TI-2025-41658 CVE-2025-68049 · GHSA-425q-6v6f-g643

WordPress bunny.net plugin <= 2.3.6 - Broken Access Control vulnerability

LOW 28

Subscriber Broken Access Control in bunny.net <= 2.3.6 versions.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00242 Published 2026-06-15 No fix listed CWE-862

TI-2024-20733 CVE-2024-31361 · GHSA-v8pw-v275-vxvw

WordPress bunny.net plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bunny.Net allows Stored XSS.This issue affects bunny.Net: from n/a through 2.0.1.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00319 Published 2024-04-11 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0