CVE-2022-1672CWE-352

Insights from Google PageSpeed < 4.0.7 - Multiple CSRF

published July 17, 2022

CVSS
—
EPSS
1%
Percentile
48.1
In the wild
Unconfirmed
What it is

The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00602 · 48.1th percentile
Weakness
CWE-352 · Cross-Site Request Forgery (CSRF)
Published
2022-07-17T10:35Z
EPSS history
Timeline
  • 17 JUL 10:35Z
    Insights from Google PageSpeed < 4.0.7 - Multiple CSRF
    cvelistv5