Browse CVEs

MEDIUM 6.1 CVE-2024-5902 The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scri… Userfeedback 1.0.16+ Fix from $1,6002024-07-12 MEDIUM 6.1 CVE-2024-0903 The User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds plugin for WordPress is vulnerable to Stored Cross-Site Scri… Userfeedback 1.0.14+ Fix from $1,6002024-02-22 MEDIUM 5.4 CVE-2023-32291 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MonsterInsights Pro allows Stored XSS.This issu… Monsterinsights after 8.14.1 Fix from $1,6002023-11-30 MEDIUM 6.1 CVE-2023-46153 Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.9 versions. Userfeedback after 1.0.9 Fix from $1,6002023-10-27 MEDIUM 6.1 CVE-2023-39308 Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.7 versions. Userfeedback after 1.0.7 Fix from $1,6002023-09-29 MEDIUM 5.4 CVE-2023-23880 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExactMetrics plugin <= 7.14.1 versions. Exactmetrics 7.14.2+ Fix from $1,6002023-08-08 MEDIUM 5.4 CVE-2023-23999 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in MonsterInsights plugin <= 8.14.0 versions. Google Analytics Dashboard 8.14.1+ Fix from $1,6002023-05-18 MEDIUM 5.4 CVE-2023-0081 The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post … Monsterinsights 8.12.1+ Fix from $1,6002023-02-06 MEDIUM 6.1 CVE-2022-3904 The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages section, allowing an unauthenticated… Monsterinsights 8.9.1+ Fix from $1,6002023-01-16