Vulnerabilities and security researches forqa-heatmap-analytics qa-heatmap-analytics

Oct 11, 2024

CVE, Research URL: CVE-2024-8513
Home page URL: Security reports for QA Analytics
Application: QA Analytics
Date: Oct 10, 2024
Research Description: The QA Analytics – Web Analytics Tool with Heatmaps & Session Replay Across All Pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_save_plugin_config() function in all versions up to, and including, 4.1.1.1. This makes it possible for unauthenticated attackers to update the plugin's settings.
Affected versions: max 4.1.1.2.
Status: vulnerable

Aug 14, 2026

CVE, Research URL: CVE-2026-27544
Home page URL: Security reports for QA Analytics
Application: QA Analytics
Date: Aug 13, 2026
Research Description: Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.
Affected versions: max 5.2.0.1.
Status: vulnerable

Oct 11, 2026

CVE, Research URL: CVE-2026-105877
Home page URL: Security reports for QA Analytics
Application: QA Analytics
Date: Oct 09, 2026
Research Description: Insertion of Sensitive Information Into Sent Data vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Retrieve Embedded Sensitive Data.This issue affects QA Analytics: from n/a through 5.3.0.0.
Affected versions: max 5.3.0.1.
Status: vulnerable

Oct 26, 2026

CVE, Research URL: CVE-2026-114697
Home page URL: Security reports for QA Analytics
Application: QA Analytics
Date: Oct 24, 2026
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1.
Affected versions: max 5.3.0.2.
Status: vulnerable