Monsterinsights

10 CVEs across 6 Monsterinsights products. Browse Monsterinsights vulnerabilities, severities, and proof-of-concept exploits.

Monsterinsights products with known CVEs

ProductCVEs
Monsterinsights4
Userfeedback4
Exactmetrics1
Google Analytics By Monster Insights1
Google Analytics Dashboard1
Monsterinsights Pro1
Monsterinsights CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-5902High7.22024-07-12The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2023-52220Medium4.32024-04-25Missing Authorization vulnerability in MonsterInsights Google Analytics by Monster Insights.This issue affects Google Analytics by Monster Insights: from n/a t…
CVE-2024-0903Medium5.42024-02-22The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2023-32291Medium6.52023-11-30Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MonsterInsights Pro allows Stored XSS.This issue affects…
CVE-2023-46153High7.12023-10-27Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.9 versions.
CVE-2023-39308High7.12023-09-29Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.7 versions.
CVE-2023-23880Medium6.52023-08-08Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExactMetrics plugin <= 7.14.1 versions.
CVE-2023-23999Medium6.52023-05-18Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MonsterInsights plugin <= 8.14.0 versions.
CVE-2023-0081Medium5.42023-02-06The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the…
CVE-2022-3904Medium6.12023-01-16The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated attacker…