Plausible Analytics

Security release: Plausible Community Edition v3.2.1 removes the vulnerable HTTP '/storybook' endpoint (affecting v3.0–v3.2.x), mitigating remote code execution; upgrade now or block the endpoint as immediate mitigation.

Adds limit-to-segment for shared links, shows visitor percentage breakdown on all reports, and fixes tracker script cache, ClickHouse low-memory settings, editor-domain issues, and legacy dashboard filter encoding.

Adds a dynamic, configurable tracking script with optional interactive events, a revamped dark theme, and numerous fixes; upgrade to community-edition v3.1.0 and restart containers.

Patch for migration procedure (fixes #5319); upgrades: ClickHouse to 24.12-alpine with CLICKHOUSE_SKIP_USER_SETUP=1, plausible community edition to v3.0.1, and restart containers.

Upgrade to 3.0.1 patch; adds teams, user/permission management, reworked scroll depth and time-on-page metrics, persistent Segments presets, and broader dashboard enhancements.

Community Edition v2.1.5 adds plain text emails and delivery-failure error logging, removes trial/billing messaging, and requires updating the image to v2.1.5 and restarting containers.

Patch release 2.1.4 fixes cross-device file moves in CSV exports/imports and adds session review/revocation, in-app password change, revised user settings UI, default invite-only registration, and background job error logging.

v2.1.3 fixes cookie/login issues and filters by changing the cookie key, enforcing Secure cookies over HTTPS, and stopping custom event tracking in CE; upgrade image to v2.1.3 and restart containers.

This release adds automatic IPv6 for outgoing connections, opt-in HTTPS with Let’s Encrypt, and a streamlined Docker Compose; plus numerous product improvements and fixes listed in the changelog.

Plausible v2.1.1 patch updates the Docker image to v2.1.1, provides restart steps, adds snippet verification and limited imported-data filtering, and fixes CSV import newline, URL param escaping, registration redirect, and ClickHouse v24 VersionedSessions migration.

Introduces Plausible Community Edition, GA4 import, bidirectional CSV import/export, TOTP 2FA, a new SMTP client, improved WordPress integration, refreshed hosting docs, and a spark-chart enhanced Sites page.

Plausible Analytics v2.0 adds period-over-period comparisons, new visitor metrics, domain changes, automatic GeoLite2 updates, and expanded email adapters, plus mandatory data migration and ClickHouse upgrade with v1→v2 data transfer.

This release adds optional city/region geolocation, Google Analytics import, CSV export, ARM64 support, an improved first-launch admin UI, and updates including v1.5.1 with deprecated auth vars and upgraded databases.

Security patch fixes a vulnerability in password reset emails, addressing exposure risk and improving email handling to prevent potential account compromise.

Fixed issue preventing ownership transfer in self-hosted environments; it can now be completed without creating a trial.

Release v1.4.2 fixes a database error when filtering goals with empty data.

v1.4.1 fixes a database error triggered when a pathname includes a question mark.

Release adds team invites and stronger filtering, disables email verification by default (ENABLE_EMAIL_VERIFICATION=true available), and updates to v1.4.0 with new metrics, dashboards, and UI fixes.

This release adds the Stats API and embedded stats, ships a default IP-to-Country database, fixes weekly/monthly SMTP reports, bumps ClickHouse to 20.8.7.15, and updates deployment tags to plausible/analytics (latest/v1/v1.3/v1.3.0) with migrations.

Update to plausible/analytics using tags latest/v1/v1.2/v1.2.0; includes new event metadata, outbound link tracking, improved UX, dark theme, load more, real-time stats, domains/favicon, default background jobs, never-ending trial, and many fixes/security.

Release 1.1.1 reverts a Dockerfile change that introduced a regression to restore stability.

Added: dashboard now presents link tags (utm_medium, utm_source, utm_campaign). Changed: consolidate DB URLs (CLICKHOUSE_DATABASE_URL, BASE_URL), remove poolsize/TLS flags, disable subscriptions by default, and make Bamboo.SMTPAdapter the default.