Medium · 4.8 CVE-2022-27845 EUVD-2022-32333GHSA-6r72-7pp6-cv8q

WordPress Plausible Analytics plugin <= 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Apr 11, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPress plugin) <= 1.2.2

Vendor	Product	Affected	Fixed
PlausibleHQ	Plausible Analytics (WordPress plugin)	<= 1.2.2 – ≤ 1.2.2	—