Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Plausible Clear all filters
TI-2026-83029 CVE-2026-119565 · GHSA-5462-5vm9-jmvr

Mass assignment in Plausible Analytics traffic change notifications

Priority LOW 24

Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that allows authenticated site editors to reassign notifications by supplying a site_id parameter.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00309 Published 2026-10-30 No fix listed CWE-915
TI-2026-83028 CVE-2026-119564 · GHSA-2p4r-4pmj-4wp8

Information exposure in Plausible Analytics enables site takeover

Priority LOW 27

Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00292 Published 2026-10-30 No fix listed CWE-201