Lucene search

K
wpvulndbDaniel RufWPVDB-ID:5C5955D7-24F0-45E6-9C27-78EF50446DAD
HistoryJun 27, 2022 - 12:00 a.m.

Insights from Google PageSpeed < 4.0.7 - Multiple CSRF

2022-06-2700:00:00
Daniel Ruf
wpscan.com
7

0.001 Low

EPSS

Percentile

43.5%

The plugin does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks

PoC

CPENameOperatorVersion
google-pagespeed-insightslt4.0.7

0.001 Low

EPSS

Percentile

43.5%

Related for WPVDB-ID:5C5955D7-24F0-45E6-9C27-78EF50446DAD