Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: bunny.net Clear all filters
TI-2025-30562 CVE-2025-48236 · GHSA-5xjm-gxc3-2jcj

WordPress bunny.net plugin <= 2.3.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 37

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bunny.net bunny.net bunnycdn allows Stored XSS.This issue affects bunny.net: from n/a through <= 2.3.0.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00481 Published 2025-05-19 No fix listed CWE-79
TI-2024-20733 CVE-2024-31361 · GHSA-v8pw-v275-vxvw

WordPress bunny.net plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bunny.Net allows Stored XSS.This issue affects bunny.Net: from n/a through 2.0.1.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00319 Published 2024-04-11 No fix listed CWE-79