Read the docs

MonsterInsights

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

MonsterInsights records in CISA KEV

No MonsterInsights vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Userfeedback 4 records LOW Monsterinsights 3 records HIGH Exactmetrics 1 record LOW Google Analytics Dashboard 1 record LOW

Records

3 records in Monsterinsights · all components

TI-2022-03581 CVE-2022-3904 · GHSA-cjcj-g2w6-gp9q

MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics

Priority HIGH 68

The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated attacker to inject arbitrary web scripts into the titles by spoofing r…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01353 Published 2023-01-16 Fixed in 8.9.1 CWE-79
TI-2023-00077 CVE-2023-0081 · GHSA-7w85-qxmf-mpxc

MonsterInsights < 8.12.1 - Contributor+ Stored XSS

Priority MEDIUM 58

The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2023-02-06 Fixed in 8.12.1
Open these records in search →