MonsterInsights kayıtları

monsterinsights üreticisine ait 10 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %60
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

10 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
24İzleyin	CVE-2022-3904Kavram kanıtı	MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analyticsmonsterinsights · monsterinsights · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,3	16 Oca 2023
24İzleyin	CVE-2023-39308İstismar yok	WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)monsterinsights · userfeedback · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	29 Eyl 2023
24İzleyin	CVE-2024-0903İstismar yok	User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site Scriptingmonsterinsights · userfeedback · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	22 Şub 2024
24İzleyin	CVE-2023-46153İstismar yok	WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)monsterinsights · userfeedback · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,4	27 Eki 2023
24İzleyin	CVE-2024-5902İstismar yok	UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parametermonsterinsights · userfeedback · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	12 Tem 2024
21İzleyin	CVE-2023-0081İstismar yok	MonsterInsights < 8.12.1 - Contributor+ Stored XSSmonsterinsights · monsterinsights · CWE-79 XSS	Orta5,4	—	%0,5	6 Şub 2023
21İzleyin	CVE-2023-32291İstismar yok	WordPress MonsterInsights Pro Plugin <= 8.14.1 is vulnerable to Cross Site Scripting (XSS)monsterinsights · monsterinsights · CWE-79 XSS	Orta5,4	—	%0,4	30 Kas 2023
21İzleyin	CVE-2023-23880İstismar yok	WordPress ExactMetrics Plugin <= 7.14.1 is vulnerable to Cross Site Scripting (XSS)monsterinsights · exactmetrics · CWE-79 XSS	Orta5,4	—	%0,3	8 Ağu 2023
21İzleyin	CVE-2023-23999İstismar yok	WordPress Google Analytics by Monster Insights Plugin <= 8.14.0 is vulnerable to Cross Site Scripting (XSS)monsterinsights · google analytics dashboard · CWE-79 XSS	Orta5,4	—	%0,3	18 May 2023
17İzleyin	CVE-2023-52220İstismar yok	WordPress MonsterInsights plugin <= 8.21.0 - Broken Access Control vulnerabilitymonsterinsights · google analytics by monster insights · CWE-862 Erişim denetimi (IDOR) Hizmet dışı bırakma	Orta4,3	—	%0,4	25 Nis 2024

CVE-2022-3904
24İzleyin
MonsterInsights < 8.9.1 - Stored Cross-Site Scripting via Google Analytics
OrtaCVSS 6,1Kavram kanıtıEPSS %1
- Kimlik doğrulamasız
- XSS
monsterinsights · monsterinsights16 Oca 2023
CVE-2023-39308
24İzleyin
WordPress User Feedback Plugin <= 1.0.7 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
monsterinsights · userfeedback29 Eyl 2023
CVE-2024-0903
24İzleyin
User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site Scripting
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
monsterinsights · userfeedback22 Şub 2024
CVE-2023-46153
24İzleyin
WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
monsterinsights · userfeedback27 Eki 2023
CVE-2024-5902
24İzleyin
UserFeedback Lite <= 1.0.15 - Unauthenticated Stored Cross-Site Scripting via Name Parameter
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
monsterinsights · userfeedback12 Tem 2024
CVE-2023-0081
21İzleyin
MonsterInsights < 8.12.1 - Contributor+ Stored XSS
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
monsterinsights · monsterinsights6 Şub 2023
CVE-2023-32291
21İzleyin
WordPress MonsterInsights Pro Plugin <= 8.14.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
monsterinsights · monsterinsights30 Kas 2023
CVE-2023-23880
21İzleyin
WordPress ExactMetrics Plugin <= 7.14.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
monsterinsights · exactmetrics8 Ağu 2023
CVE-2023-23999
21İzleyin
WordPress Google Analytics by Monster Insights Plugin <= 8.14.0 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 5,4İstismar yokEPSS %0
- XSS
monsterinsights · google analytics dashboard18 May 2023
CVE-2023-52220
17İzleyin
WordPress MonsterInsights plugin <= 8.21.0 - Broken Access Control vulnerability
OrtaCVSS 4,3İstismar yokEPSS %0
- Erişim denetimi (IDOR)
- Hizmet dışı bırakma
monsterinsights · google analytics by monster insights25 Nis 2024