CVE-2022-1672

The CVE-2022-1672 entry concerns the WordPress plugin Insights from Google PageSpeed (pre-4.0.7). The issue is a CSRF vulnerability where the plugin does not verify CSRF before performing actions (e.g., deleting Custom URLs), potentially allowing an attacker to cause a logged-in administrator to ...

CVE-2022-0431

Summary (CVE-2022-0431) The vulnerability affects the WordPress Insights from Google PageSpeed plugin prior to version 4.0.4. The issue arises because the plugin does not sanitise and escape several parameters when outputting them in attributes on the settings dashboard, enabling a Reflected Cros...