MO
Vendor
Monsterinsights
12
CVEs
0
On KEV
0
New 30D
Products
US6.1
Userfeedback
Monsterinsights
4 CVEs0 on KEV0 new
MO6.1
Monsterinsights
Monsterinsights
3 CVEs0 on KEV0 new
GA5.4
Google Analytics Dashboard
Monsterinsights
2 CVEs0 on KEV0 new
EX5.4
Exactmetrics
Monsterinsights
1 CVEs0 on KEV0 new
GA4.3
Google Analytics by Monster Insights
MonsterInsights
1 CVEs0 on KEV0 new
MP5.4
MonsterInsights Pro
MonsterInsights
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-5902 | US Userfeedback Monsterinsights | 6.1 | Jul 12 | UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter |
| CVE-2023-52220 | GA Google Analytics by Monster Insights MonsterInsights | 4.3 | Apr 25 | WordPress MonsterInsights plugin <= 8.21.0 - Broken Access Control vulnerability |
| CVE-2024-0903 | US Userfeedback Monsterinsights | 6.1 | Feb 22 | User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2023-32291 | MP MonsterInsights Pro MonsterInsights | 5.4 | Nov 30 | WordPress MonsterInsights Pro Plugin <= 8.14.1 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-46153 | US Userfeedback Monsterinsights | 6.1 | Oct 27 | WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-39308 | US Userfeedback Monsterinsights | 6.1 | Sep 29 | WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-23880 | EX Exactmetrics Monsterinsights | 5.4 | Aug 8 | WordPress ExactMetrics Plugin <= 7.14.1 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-23999 | GA Google Analytics Dashboard Monsterinsights | 5.4 | May 18 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MonsterInsights plugin <= 8.14.0 versions |
| CVE-2023-0081 | MO Monsterinsights Monsterinsights | 5.4 | Feb 6 | The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed,… |
| CVE-2022-3904 | MO Monsterinsights Monsterinsights | 6.1 | Jan 16 | The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated attacker to inject arbitrary… |