domain-locker

Domain Locker The Central Hub for all your Domain Names 🌐domain-locker.com About The aim of Domain Locker, is to give you complete visibility of your domain name portfolio, in once central place. For each domain you add, we analyse it and fetch all associated data. We then continuously monitor yo...

Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect

The plugin is vulnerable to Open Redirect due to insufficient validation on the redirect oauth2callback.php file. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action. id: CVE-2024-0250...

bitbucket-iac-scan

Bitbucket Security: Infrastructure as Code Security Scanner Scans your Infrastructure as Code configuration files to ensure good security practises. Creates a security Code Insights report if issue is found. This Bitbucket Cloud supported Pipe leverages the industry leading KICS scanning tool to...

CVE-2024-54378

CVE-2024-54378 Quietly Insights = 1.2.2 - Missing Authorization to Authenticated Subscriber+ Arbitrary Options Update Description The Quietly Insights plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on...

Important: Red Hat Security Advisory: Red Hat Lightspeed (formerly Insights) for Runtimes security update

An update is now available for Red Hat Lightspeed formerly Insights for Runtimes on RHEL 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

Security Bulletin: security vulnerabilities are addressed with IBM Business Automation Insights iFixes for October 2026.

Summary Security vulnerabilities are addressed with IBM Business Automation Insights 26.0.0-IF004 and 24.0.1-IF010. These vulnerabilities have been also addressed in 24.0.0-IF009 and 25.0.0-IF007 Vulnerability Details CVEID:CVE-2026-90711 DESCRIPTION: proxy-addr is a Node.js module that determine...

CLEANSTART-2026-JY64483 One of the usage insights HTTP API endpoints in Grafana Enterprise 6

Security vulnerability affects the grafana package. One of the usage insights HTTP API endpoints in Grafana Enterprise 6...

Security Bulletin: IBM Maximo Application Suite - Cluster Performance Insights uses axios-1.18.1, source-map-js-1.2.1, qs-6.16.0, pymongo-4.17.0, moment-2.30.1, pymongo-4.18.1 and ansible-14.4.0 which are vulnerable to multiple CVE

Summary IBM Maximo Application Suite - Cluster Performance Insights uses axios-1.18.1, source-map-js-1.2.1, qs-6.16.0, pymongo-4.17.0, moment-2.30.1, pymongo-4.18.1 and ansible-14.4.0 which are vulnerable to CVE-2026-88029, CVE-2026-17495, CVE-2026-96747, CVE-2026-96748, CVE-2026-96749,...

@n8n/backend-module-insights (0.2.0), n8n (2.44.0) potentially affected by CVE-2026-118649 via @n8n/backend-services (1.4.0)

@n8n/backend-services NPM version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on @n8n/backend-services and may be impacted: - @n8n/backend-module-insights 0.2.0 - n8n 2.44.0 Source cves: CVE-2026-118649 Source advisory: MEND:CVE-2026-118649...

@n8n/backend-module-insights (0.1.0), n8n (>=2.43.0, <=2.43.4) potentially affected by CVE-2026-118649 via @n8n/backend-services (>=1.3.0, <=1.3.2)

@n8n/backend-services NPM version =1.3.0, =2.43.0, =2.43.4 Source cves: CVE-2026-118649 Source advisory: MEND:CVE-2026-118649...

WordPress Analytics Insights – Google Analytics Dashboard for WordPress plugin <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting vulnerability

Unauthenticated Stored Cross-Site Scripting vulnerability discovered by hei in WordPress Plugin Analytics Insights for Google Analytics versions = 6.3.12...

CVE-2026-111820

The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title in all versions up to, and including, 6.3.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

CVE-2026-111820

The Analytics Insights – Google Analytics Dashboard for WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 6.3.12 . The root cause is insufficient input sanitization and output escaping specifically within the Page Title field. This flaw allows...

CVE-2026-111820 Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Title

The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title in all versions up to, and including, 6.3.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

EUVD-2026-110599

The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title in all versions up to, and including, 6.3.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

CVE-2026-111820 Analytics Insights <= 6.3.12 - Unauthenticated Stored Cross-Site Scripting via GA4 Realtime Page Title

The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title in all versions up to, and including, 6.3.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

WordPress Analytics Insights cross-site scripting vulnerability

WordPress Analytics Insights versions 6.3.12 and earlier contain a cross-site scripting vulnerability. This vulnerability stems from insufficient input sanitization and output escaping, resulting in stored cross-site scripting. Unauthenticated attackers can inject arbitrary web scripts into pages...

PT-2026-125869

The Analytics Insights – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Page Title in all versions up to, and including, 6.3.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate...

CVE-2026-95686

The Opti-Behavior – Self-Hosted Heatmaps, Session Recordings, Funnels, A/B Testing & Smart Insights plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'targetUrl' parameter in all versions up to, and including, 1.9.2.1 due to insufficient input sanitization and...

CVE-2026-104795

The insights-runtime-extractor runs as a privileged DaemonSet hostPID: true that scans container processes for runtime fingerprinting. When scanning a container, the coordinator: 1. forks a child process 2. setns into the target container's PID and mount namespaces 3. fchdir back to an orphaned F...