Login Request a demo
MO
Product
MonsterInsights
by MonsterInsights · last CVE Nov 30, 2023
4
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 4Low 0
Severity
All severities4Critical0High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add MonsterInsights to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-3904
6.1
1%
Jan 16
The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated attacker to inject arbitrary…
Affected: before 8.9.1
CVE-2023-32291
5.4
0%
Nov 30
WordPress MonsterInsights Pro Plugin <= 8.14.1 is vulnerable to Cross Site Scripting (XSS)
Affected: through 8.14.1
CVE-2023-23999
5.4
0%
May 18
WordPress Google Analytics by Monster Insights Plugin <= 8.14.0 is vulnerable to Cross Site Scripting (XSS)
Affected: through 8.14.0
CVE-2023-0081
5.4
1%
Feb 6
The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed,…
Affected: before 8.12.1
Showing 4