Vendor

    MonsterInsights

    10 known vulnerabilities in products by MonsterInsights, 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in MonsterInsights
    MediumCVE-2022-3904

    MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics

    		6.1
    HighCVE-2023-39308

    WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    MediumCVE-2023-32291

    WordPress MonsterInsights Pro Plugin <= 8.14.1 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    HighCVE-2024-5902

    UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter

    also in 1 other product

    		7.2
    HighCVE-2023-46153

    WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)

    		7.1
    MediumCVE-2023-0081

    MonsterInsights < 8.12.1 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2023-23880

    WordPress ExactMetrics Plugin <= 7.14.1 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    MediumCVE-2024-0903

    MonsterInsights Userfeedback: Cross-site Scripting

    also in 1 other product

    		5.4
    MediumCVE-2023-23999

    MonsterInsights: Cross-site Scripting

    		6.5
    MediumCVE-2023-52220

    WordPress MonsterInsights plugin <= 8.21.0 - Broken Access Control vulnerability

    		4.3

    Products

    Products by MonsterInsights
    MonsterInsights40
    UserFeedback40