CVE-2022-1672

creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:49+00:00| seen| https://t.me/cibsecurity/46391...

CVE-2022-1672

The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks...

CVE-2022-1672

The CVE-2022-1672 entry concerns the WordPress plugin Insights from Google PageSpeed (pre-4.0.7). The issue is a CSRF vulnerability where the plugin does not verify CSRF before performing actions (e.g., deleting Custom URLs), potentially allowing an attacker to cause a logged-in administrator to ...