Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: MonsterInsights Component: Monsterinsights Clear all filters
TI-2023-00077 CVE-2023-0081 · GHSA-7w85-qxmf-mpxc

MonsterInsights < 8.12.1 - Contributor+ Stored XSS

Priority MEDIUM 58

The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00589 Published 2023-02-06 Fixed in 8.12.1
TI-2022-03581 CVE-2022-3904 · GHSA-cjcj-g2w6-gp9q

MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics

Priority HIGH 68

The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated attacker to inject arbitrary web scripts into the titles by spoofing r…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01353 Published 2023-01-16 Fixed in 8.9.1 CWE-79