Plausible has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 4.8 (medium).
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 4.8
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Plausible vulnerabilities
CVEs affecting Plausible, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-119565Medium· 4.3Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update
Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that allows authenticated site editors to reassign notifications by supplying a site_id parameter. Attackers can submit traf…
▾ SunlitPlausible · Plausible AnalyticsEPSS 0.31%via CVEORG
CVE-2026-119564Medium· 5.3Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs
Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register wit…
▾ SunlitPlausible · Plausible AnalyticsEPSS 0.29%via CVEORG