useplunk

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

useplunk records in CISA KEV

No useplunk vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Plunk 3 records MEDIUM

Records

5 records

TI-2026-30514 CVE-2026-42193

Plunk: SNS webhook forgery

MEDIUM 46

Plunk is an open-source email platform built on top of AWS SES.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00127 Published 2026-05-08 Fixed in 0.9.0 CWE-347

TI-2026-24634 CVE-2026-32096

Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns

MEDIUM 46

Plunk is an open-source email platform built on top of AWS SES.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00314 Published 2026-03-11 Fixed in 0.7.0 CWE-918

TI-2026-27197 CVE-2026-34975

Plunk has a CRLF Email Header Injection in raw MIME message construction allows…

LOW 36

Plunk is an open-source email platform built on top of AWS SES.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00201 Published 2026-04-06 Fixed in 0.8.0 CWE-93

TI-2026-30513 CVE-2026-42192

Plunk: Stored XSS in campaign view

LOW 24

Plunk is an open-source email platform built on top of AWS SES.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00176 Published 2026-05-08 Fixed in 0.9.0 CWE-79

TI-2026-24633 CVE-2026-32095

Plunk has Stored Cross-Site Scripting (XSS) via SVG File Upload

LOW 24

Plunk is an open-source email platform built on top of AWS SES.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00162 Published 2026-03-11 Fixed in 0.7.1 CWE-79

Open these records in search →