GCVE - cpe:2.3:a:plausible:plausible_analytics:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:plausible:plausible_analytics:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Plausible (`94da3d95-302d-52b8-8dbe-6346ad7a87b8`)
Product	Plausible Analytics (`d3ced868-85dc-58c8-87ea-b19241a3cd38`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-40553`	vulnerable	2026-06-08 06:11:03.608510	WordPress Plausible Analytics Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS) MEDIUM (5.8) Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Plausible.Io Plausible Analytics plugin <= 1.3.3 versions. Published: 2023-09-06T08:20:32.274Z Updated: 2026-04-28T16:08:36.713Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/plausible-analytics/wordpress-plausible-analytics-plugin-1-3-3-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-27845`	vulnerable	2026-06-08 05:42:43.409547	WordPress Plausible Analytics plugin <= 1.2.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability MEDIUM (4.8) Authenticated (admin or higher user role) Stored Cross-Site Scripting (XSS) in PlausibleHQ Plausible Analytics (WordPress plugin) <= 1.2.2 Published: 2022-04-11T19:38:17.237Z Updated: 2026-04-28T16:07:39.999Z Open on db.gcve.eu Reference links https://wordpress.org/plugins/plausible-analytics/#developers https://patchstack.com/database/vulnerability/plausible-analytics/wordpress-plausible-analytics-plugin-1-2-2-authenticated-stored-cross-site-scripting-xss-vulnerability	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.