Skip to content
OpenAdvisories

Vendor

useplunk

5 known vulnerabilities.

Products

plunk 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-32096 Public exploit

    Plunk has SSRF via unvalidated AWS SNS SubscriptionConfirmation in POST /webhooks/sns

    Plunk is an open-source email platform built on top of AWS SES. Prior to 0.7.0, a Server-Side Request Forgery (SSRF) vulnerability existed in the SNS webhook handler. An unauthenticated attacker could send a crafted request that caused the server to make an a…

    useplunk plunk