Skip to content
Monsterinsights vulnerabilities
Newest
-
monsterinsights pro, unknown monsterinsights pro +1 more
MonsterInsights Pro 10.2.0/10.2.2 - Backdoored via AWS S3 bucket compromise
CVE-2026-11976
10.0 Critical
-
monsterinsights userfeedback, smub userfeedback – create interactive feedback form, user surveys, and polls in seconds +1 more
UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter
CVE-2024-5902
7.2 High
-
monsterinsights google analytics by monster insights, google analytics dashboard +1 more
WordPress MonsterInsights plugin <= 8.21.0 - Broken Access Control vulnerability
CVE-2023-52220
4.3 Medium
-
monsterinsights userfeedback, smub userfeedback – create interactive feedback form, user surveys, and polls in seconds +1 more
User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site Scripting
CVE-2024-0903
5.4 Medium
-
monsterinsights, monsterinsights pro +1 more
WordPress MonsterInsights Pro Plugin <= 8.14.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32291
6.5 Medium
-
monsterinsights userfeedback, syed balkhi user feedback +1 more
WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-46153
7.1 High
-
monsterinsights userfeedback, syed balkhi user feedback +1 more
WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-39308
7.1 High
-
exactmetrics
WordPress ExactMetrics Plugin <= 7.14.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-23880
6.5 Medium
-
monsterinsights, monsterinsights google analytics dashboard +1 more
WordPress Google Analytics by Monster Insights Plugin <= 8.14.0 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-23999
6.5 Medium
-
monsterinsights
MonsterInsights < 8.12.1 - Contributor+ Stored XSS
CVE-2023-0081
5.4 Medium
-
monsterinsights
MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics
CVE-2022-3904
Public exploit
6.1 Medium