CVE-2026-119565 | Plausible Analytics up to 3.2.1 Traffic Change Notification traffic_change_notification.ex update_traffic_change_notification site_id dynamically-determined object attributes

October 30, 2026 Yanac

A vulnerability was found in Plausible Analytics up to 3.2.1. It has been declared as critical. This vulnerability affects the function update_traffic_change_notification of the file lib/plausible/site/traffic_change_notification.ex of the component Traffic Change Notification. The manipulation of the argument site_id results in dynamically-determined object attributes.

This vulnerability is identified as CVE-2026-119565. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More