Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Insights From Google Pagespeed Project Subscribe
Filtered by product Insights From Google Pagespeed
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-1672 1 Insights From Google Pagespeed Project 1 Insights From Google Pagespeed 2022-07-18 6.8 MEDIUM 8.8 HIGH
The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks
CVE-2022-0431 1 Insights From Google Pagespeed Project 1 Insights From Google Pagespeed 2022-04-11 4.3 MEDIUM 6.1 MEDIUM
The Insights from Google PageSpeed WordPress plugin before 4.0.4 does not sanitise and escape various parameters before outputting them back in attributes in the plugin's settings dashboard, leading to Reflected Cross-Site Scripting