EUVD-2026-113830

Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in updatetrafficchangenotification that allows authenticated site editors to reassign notifications by supplying a siteid parameter. Attackers can submit trafficchangenotificationsiteid set to another site's primary key vi...

PT-2026-133503

Plausible Analytics through 3.2.1 contains a mass assignment vulnerability in update traffic change notification that allows authenticated site editors to reassign notifications by supplying a site id parameter. Attackers can submit traffic change notificationsite id set to another site's primary...