Plausible Community Edition had an unauthenticated RCE for over a year