Read the docs

Plausible

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Plausible records in CISA KEV

No Plausible vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Plausible Analytics 2 records LOW

Records

4 records

TI-2026-83028 CVE-2026-119564 · GHSA-2p4r-4pmj-4wp8

Information exposure in Plausible Analytics enables site takeover

Priority LOW 27

Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00292 Published 2026-10-30 No fix listed CWE-201
TI-2026-83029 CVE-2026-119565 · GHSA-5462-5vm9-jmvr

Mass assignment in Plausible Analytics traffic change notifications

Priority LOW 24

Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that allows authenticated site editors to reassign notifications by supplying a site_id parameter.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00309 Published 2026-10-30 No fix listed CWE-915
Open these records in search →