VDB
CVE-2022-1672
CVE-2022-1672
PUBLISHED
CVSS 8.800000190734863 HIGH
The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks
EPSS 0.61% · 47.8th percentile
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.61%
47.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| insights_from_google_pagespeed_project | insights_from_google_pagespeed | 0 |
| Unknown | Insights from Google PageSpeed | 4.0.7 |
Timeline
- Jul 17, 2022 CVE Published
- Jul 18, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 21, 2022 EPSS Score
- Jan 24, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 12, 2023 EPSS Score
- Apr 28, 2023 EPSS Score
- Jun 15, 2023 EPSS Score
- Aug 1, 2023 EPSS Score
- Nov 4, 2023 EPSS Score
- Dec 22, 2023 EPSS Score