Plausible Analytics
Approved changes feed: RSS · Atom
cpe:2.3:a:plausible:plausible_analytics:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Plausible (94da3d95-302d-52b8-8dbe-6346ad7a87b8) |
|---|---|
| Product | Plausible Analytics (d3ced868-85dc-58c8-87ea-b19241a3cd38) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/plausible/wordpress |
purl2cpe | 2026-06-01 10:14:58.148779 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-119564 |
vulnerable | 2026-11-03 10:17:11.994314 |
Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs
MEDIUM (5.3)
Plausible Analytics Community Edition through 3.2.1 contains an information exposure vulnerability that allows site editors to obtain pending invitation and ownership-transfer IDs from the settings/people page. Attackers can register with the invitee's email using the exposed ID and accept it, gaining the invited role or taking site ownership.
Published: 2026-10-30T11:31:11.750Z
Updated: 2026-10-30T15:54:10.078Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-119565 |
vulnerable | 2026-11-03 10:17:11.897754 |
Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update
MEDIUM (4.3)
Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update_traffic_change_notification that allows authenticated site editors to reassign notifications by supplying a site_id parameter. Attackers can submit traffic_change_notification[site_id] set to another site's primary key via PUT /sites/:domain/traffic-change-notification/:type to receive that site's traffic alerts and visitor figures.
Published: 2026-10-30T11:31:12.420Z
Updated: 2026-10-30T16:20:23.056Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.