title: Insights from Google PageSpeed < 4.0.7 - Multiple CSRF
description: The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks
problem types: CWE-352 Cross-Site Request Forgery (CSRF)
affected:
{
product: Insights from Google PageSpeed
vendor: Unknown
versions:
lessThan: 4.0.7, status: affected, version: 4.0.7, versionType: custom
}