Log in Start free

useplunk

Products

ProductCVEsExploitedLatest
plunk5–May 8, 2026

Exploited and recent CVEs

  • CVE-2026-42192 Medium 5.4 Plunk: Stored XSS in campaign view 0.2%
  • CVE-2026-42193 Critical 9.1 Plunk: SNS webhook forgery 0.1%
  • CVE-2026-34975 High 8.5 Plunk has a CRLF Email Header Injection in raw MIME message construction allows authenticated API user to inject arbitrary email headers 0.2%
  • CVE-2026-32096 Critical 9.3 Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns 0.3%
  • CVE-2026-32095 Medium 5.4 Plunk has Stored Cross-Site Scripting (XSS) via SVG File Upload 0.2%