CVE-2022-1695: Tipsandtricks-Hq Wp Simple Adsense Insertion

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The WP Simple Adsense Insertion WordPress plugin before 2.1 does not perform CSRF checks on updates to its admin page, allowing an attacker to trick a logged in user to manipulate ads and inject arbitrary javascript via submitting a form.

Affected products

• Tipsandtricks-Hq Wp Simple Adsense Insertion: before 2.1 (fixed in 2.1)

Published 2022-06-08. Last modified 2026-06-17.