Product by Plausible

    Plausible Analytics

    4 known vulnerabilities in Plausible Analytics (Plausible), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Plausible Analytics (Plausible)
    MediumCVE-2026-119564

    Plausible Analytics through 3.2.1 Site Takeover via Exposed Invitation IDs

    		5.3
    MediumCVE-2026-119565

    Plausible Analytics through 3.2.1 Mass Assignment via Traffic Change Notification Update

    		4.3
    MediumCVE-2022-27845

    PlausibleHQ Plausible Analytics (WordPress plugin): Cross-site Scripting

    		4.8
    MediumCVE-2023-40553

    WordPress Plausible Analytics Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)

    		5.8

    All products by Plausible