Skip to content
Sign in
5.4 Medium

CVE-2023-0081 The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before…

Description

The MonsterInsights WordPress plugin before 8.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.

Affected products and versions

Product Affected versions Fixed in
MonsterInsights 8.12 earliest → < 8.12.1 8.12.1

Other CVEs of MonsterInsights

The 3 CVEs of MonsterInsights →
CVE-2026-11366 The MonsterInsights WordPress plugin before 11.1.0 does not correctly validate the signature on one of its… 3.7 Low CVE-2022-3904 The MonsterInsights WordPress plugin before 8.9.1 does not sanitize or escape page titles in the top posts/pages… 6.1 Medium
Track this CVE