Cross-Site Scripting
9 records81.8%First: 2014. Latest: 2023.
Plugin security history
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 11 vulnerability records associated with MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy), published between 2014 and 2026.
Dataset last synchronized: 2026-08-02 09:41:47 UTC
At a glance
Security Snapshot
11Total records
0Critical
3High
6Medium
2Low
0Informational
11Patched records
0Currently marked unpatched
2014-11-26First disclosure
2026-05-12Latest disclosure
6 of 11CVE coverage
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2014 | 1 | |
| 2015 | 4 | |
| 2018 | 1 | |
| 2022 | 1 | |
| 2023 | 2 | |
| 2024 | 1 | |
| 2026 | 1 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| High | 3 | 27.3% |
| Medium | 6 | 54.5% |
| Low | 2 | 18.2% |
Vulnerability-Type Breakdown
Missing Authorization
2 records18.2%First: 2024. Latest: 2026.
Patch Status
- Patched
- 11
- Currently marked unpatched
- 0
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
10.1.38.22.08.14.18.12.18.9.17.2.05.4.55.45.3.35.1.3
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
*-10.1.2 | MonsterInsights <= 10.1.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure And Plugin Integration Reset | May 12, 2026 | 10.1.3 | High |
*-8.21.0 | Google Analytics by Monster Insights <= 8.21.0 - Missing Authorization | January 5, 2024 | 8.22.0 | Medium |
*-8.14.0 | Google Analytics by Monster Insights <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | May 10, 2023 | 8.14.1 | Medium |
*-8.12.0 | MonsterInsights <= 8.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | January 13, 2023 | 8.12.1 | Medium |
*-8.9.0 | MonsterInsights <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via Google Analytics | December 23, 2022 | 8.9.1 | Medium |
*-7.1 | MonsterInsights – Google Analytics Dashboard for WordPress <= 7.1 - Stored Cross-Site Scripting | September 18, 2018 | 7.2.0 | Medium |
*-5.4.4 | MonsterInsights - Google Analytics Dashboard for WordPress <= 5.4.4 - Authenticated Stored Cross-Site Scripting | August 10, 2015 | 5.4.5 | Low |
*-5.3.3 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) <= 5.3.3 - Cross-Site Scripting | April 20, 2015 | 5.4 | High |
*-5.3.2 | MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Stored Cross-Site Scripting | March 19, 2015 | 5.3.3 | High |
*-5.3.2 | MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Authenticated Stored Cross-Site Scripting | March 6, 2015 | 5.3.3 | Medium |
*-5.1.2 | MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) <= 5.1.2 - Cross-Site Scripting | November 26, 2014 | 5.1.3 | Low |
Selected source records
Latest Records
HighCVE-2026-5371
MonsterInsights <= 10.1.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure And Plugin Integration Reset
Published: May 12, 2026
- Affected versions
- *-10.1.2
- Patched versions
- 10.1.3
MediumCVE-2023-52220
Google Analytics by Monster Insights <= 8.21.0 - Missing Authorization
Published: January 5, 2024
- Affected versions
- *-8.21.0
- Patched versions
- 8.22.0
MediumCVE-2023-23999
Google Analytics by Monster Insights <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: May 10, 2023
- Affected versions
- *-8.14.0
- Patched versions
- 8.14.1
MediumCVE-2023-0081
MonsterInsights <= 8.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: January 13, 2023
- Affected versions
- *-8.12.0
- Patched versions
- 8.12.1
MediumCVE-2022-3904
MonsterInsights <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via Google Analytics
Published: December 23, 2022
- Affected versions
- *-8.9.0
- Patched versions
- 8.9.1
Medium
MonsterInsights – Google Analytics Dashboard for WordPress <= 7.1 - Stored Cross-Site Scripting
Published: September 18, 2018
- Affected versions
- *-7.1
- Patched versions
- 7.2.0
Low
MonsterInsights - Google Analytics Dashboard for WordPress <= 5.4.4 - Authenticated Stored Cross-Site Scripting
Published: August 10, 2015
- Affected versions
- *-5.4.4
- Patched versions
- 5.4.5
High
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) <= 5.3.3 - Cross-Site Scripting
Published: April 20, 2015
- Affected versions
- *-5.3.3
- Patched versions
- 5.4
Highest-Severity Records
High
MonsterInsights – Google Analytics Dashboard for WordPress (Website Stats Made Easy) <= 5.3.3 - Cross-Site Scripting
Published: April 20, 2015
- Affected versions
- *-5.3.3
- Patched versions
- 5.4
High
MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Stored Cross-Site Scripting
Published: March 19, 2015
- Affected versions
- *-5.3.2
- Patched versions
- 5.3.3
HighCVE-2026-5371
MonsterInsights <= 10.1.2 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure And Plugin Integration Reset
Published: May 12, 2026
- Affected versions
- *-10.1.2
- Patched versions
- 10.1.3
Medium
MonsterInsights – Google Analytics Dashboard for WordPress <= 7.1 - Stored Cross-Site Scripting
Published: September 18, 2018
- Affected versions
- *-7.1
- Patched versions
- 7.2.0
MediumCVE-2023-0081
MonsterInsights <= 8.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: January 13, 2023
- Affected versions
- *-8.12.0
- Patched versions
- 8.12.1
MediumCVE-2023-23999
Google Analytics by Monster Insights <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published: May 10, 2023
- Affected versions
- *-8.14.0
- Patched versions
- 8.14.1
Medium
MonsterInsights – Google Analytics Dashboard for WordPress <= 5.3.2 - Authenticated Stored Cross-Site Scripting
Published: March 6, 2015
- Affected versions
- *-5.3.2
- Patched versions
- 5.3.3
MediumCVE-2022-3904
MonsterInsights <= 8.9.0 - Unauthenticated Stored Cross-Site Scripting via Google Analytics
Published: December 23, 2022
- Affected versions
- *-8.9.0
- Patched versions
- 8.9.1
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.