Threat database

4 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-114697QA Analytics · Cross-site Scripting High7.1EPSS 0.3%2026-10-24CVE Database V5CVE-2026-114697 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1. EPSS 0.3%Vulnerability QuarkA	CVE Database V5	2026-10-24
Medium	6.9	EPSS 0.3%	CVE-2026-105877QA Analytics · Insertion of Sensitive Information Into Sent Data Medium6.9EPSS 0.3%2026-10-09CVE Database V5CVE-2026-105877 Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: from n/a through 5.3.0.0. EPSS 0.3%Vulnerability QuarkA	CVE Database V5	2026-10-09
Critical	10.0	EPSS 0.9%	CVE-2026-27544QA Analytics · Code Injection Critical10.0EPSS 0.9%2026-08-13CVE Database V5CVE-2026-27544 Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions. EPSS 0.9%Vulnerability QuarkA #cwe-94 #ghsa-fv8g-mjfh-5j9v	CVE Database V5	2026-08-13
Medium	5.3	EPSS 0.4%	CVE-2024-8513QA Assistants – Driven by data · Missing Authorization Medium5.3EPSS 0.4%2024-10-10CVE Database V5CVE-2024-8513 The QA Analytics – Web Analytics Tool with Heatmaps & Session Replay Across All Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_save_plugin_config() function in all versions up to, and including, 4.1.1.1. This makes it possible for unauthenticated attackers to update the plugin's settings. EPSS 0.4%Vulnerability quarka #cwe-862	CVE Database V5	2024-10-10

Showing 1–4 of 4 results