Skip to content
OpenAdvisories

Product · Plausible

Plausible Analytics

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-119565

    Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update

    Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that allows authenticated site editors to reassign notifications by supplying a site_id parameter. Attackers can submit traffic_change_notificatio…

    Plausible Plausible Analytics
  • Medium 5.3
    CVE-2026-119564

    Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

    Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register with the invitee's email …

    Plausible Plausible Analytics