CVE-2022-1570

Files Download Delay < 1.0.7 - Subscriber+ Settings Reset

published June 6, 2022

CVSS
—
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.5th percentile
Published
2022-06-06T08:51Z
EPSS history
Timeline
  • 06 JUN 08:51Z
    Files Download Delay < 1.0.7 - Subscriber+ Settings Reset
    cvelistv5